配置靜態NAT實現內外網通信
實驗名稱:配置靜態NAT實現內外網通信
實驗拓撲:
如圖所示,現有一臺PC機,想要訪問到ISP的服務,該如何操做呢?
實驗步驟:
- 配置內外網設備的IP地址
PC機:
Gw:
Router>en
Router#configure terminal
Enter configuration commands, one per line. End with CNTL/Z.
Router(config)#hostname gw
gw(config)#interface fastEthernet 0/0
gw(config-if)#no shutdown
%LINK-5-CHANGED: Interface FastEthernet0/0, changed state to up
%LINEPROTO-5-UPDOWN: Line protocol on Interface FastEthernet0/0, changed state to up
gw(config-if)#ip address 192.168.10.254 255.255.255.0
gw(config-if)#exit
gw(config)#interface fastEthernet 0/1
gw(config-if)#no shutdown
%LINK-5-CHANGED: Interface FastEthernet0/1, changed state to up
gw(config-if)#ip address 100.1.1.1 255.255.255.0
gw(config-if)#exit
gw(config)#
SLP-1:
Router>EN
Router#CONFigure
Enter configuration commands, one per line. End with CNTL/Z.
Router SLP-1 (config)#hostname SLP-1
SLP-1 (config)#interface fastEthernet 0/0
SLP-1 (config-if)#no shutdown
SLP-1 (config-if)#
%LINK-5-CHANGED: Interface FastEthernet0/0, changed state to up
%LINEPROTO-5-UPDOWN: Line protocol on Interface FastEthernet0/0, changed state to up
SLP-1 (config-if)#ip address 100.1.1.2 255.255.255.0
SLP-1 (config-if)#exit
SLP-1 (config)#interface fastEthernet 0/1
SLP-1 (config-if)#no shutdown
SLP-1 (config-if)#
%LINK-5-CHANGED: Interface FastEthernet0/1, changed state to up
SLP-1 (config-if)#ip address 200.1.1.1 255.255.255.0
SLP-1 (config)#exit
SLP-1#
SLP-2:
Router>EN
Router#CONFigure
Configuring from terminal, memory, or network [terminal]?
Enter configuration commands, one per line. End with CNTL/Z.
Router SLP-1 (config)#hostname SLP-2
SLP-2 (config)#interface fastEthernet 0/0
SLP-2 (config-if)#no shutdown
SLP-2 (config-if)#
%LINK-5-CHANGED: Interface FastEthernet0/0, changed state to up
%LINEPROTO-5-UPDOWN: Line protocol on Interface FastEthernet0/0, changed state to up
SLP-2 (config-if)#ip address 200.1.1.2 255.255.255.0
SLP-2 (config-if)#exit
- 配置網關設備上的默認路由
gw(config)#ip route 0.0.0.0 0.0.0.0 100.1.1.2
gw(config)#exit
gw#
%SYS-5-CONFIG_I: Configured from console by console - 配置ISP邊的網絡(啟用IGP-RIP)
SLP-1:
SLP-1(config)#router rip \開啟rip
SLP-1(config-router)#version 2\選擇rip版本2
SLP-1(config-router)#no auto-summary \關閉自動匯總
SLP-1(config-router)#passive-interface fastEthernet 0/0
SLP-1(config-router)#network 100.1.1.0
SLP-1(config-router)#network 200.1.1.0
SLP-1(config-router)#exit
SLP-1(config)#
SLP-2:
SLP-2(config)#router rip \開啟rip
SLP-2(config-router)#version 2\選擇rip版本2
SLP-2(config-router)#no auto-summary \關閉自動匯總
SLP-2(config-router)#network 200.1.1.0
SLP-2(config-router)#exit
SLP-2(config)#
- 在網關設備上配置NAT邊界
Gw:
gw(config)#interface fastEthernet 0/0
gw(config-if)#ip nat inside \標記此為NAT的內部端口
gw(config-if)#exit
gw(config)#interface fastEthernet 0/1
gw(config-if)#ip nat outside \標記此為NAT的外部端口
gw(config-if)#exit
gw(config)# - 配置NAT轉換條目
Gw:
gw(config)#ip nat inside source static 192.168.10.1 100.1.1.1
gw(config)#exit
gw# -
驗證、測試、保存
Gw:show ip nat translation:
debug ip nat :
PC-1:
ping 200.1.1.2
Gw:
根據此圖可以看出,NAT將一個私有地址轉換為公有地址,從而實現了訪問的服務。
今天就暫時先簡單說這些,關於NAT的其他類型會在後面為大家呈現,請大家多多關註!!!!!
配置靜態NAT實現內外網通信