您好,登錄后才能下訂單哦!
設(shè)置方式:
方法一:建立地址池(單一地址)作為對(duì)外全局地址
方法二:不建立地址池(設(shè)置端口作為對(duì)外地址)
拓?fù)鋱D如下:
1、設(shè)定三臺(tái)PC機(jī)的地址
PC1
PC1>
PC1> ip 192.168.100.30 192.168.100.1
Checking for duplicate address...
PC1 : 192.168.100.30 255.255.255.0 gateway 192.168.100.1
PC1>
PC2
PC2>
PC2> ip 192.168.100.20 192.168.100.1
Checking for duplicate address...
PC1 : 192.168.100.20 255.255.255.0 gateway 192.168.100.1
PC2>
PC3
PC3>
PC3> ip 10.0.0.10 10.0.0.1
Checking for duplicate address...
PC1 : 10.0.0.10 255.255.255.0 gateway 10.0.0.1
PC3>
2、設(shè)定二層交換機(jī)sw
sw#conf t
Enter configuration commands, one per line. End with CNTL/Z.
sw(config)#no ip routing //關(guān)閉路由功能,使三層交換鏡像變?yōu)槎咏粨Q機(jī)
sw(config)#
3、設(shè)定路由R1
R1#conf t
Enter configuration commands, one per line. End with CNTL/Z.
R1(config)#int f 0/0
R1(config-if)#ip add 192.168.100.1 255.255.255.0 //僅設(shè)定IP地址與子網(wǎng)掩碼
R1(config-if)#no shut
*Mar 1 00:06:33.063: %LINK-3-UPDOWN: Interface FastEthernet0/0, changed state to up
*Mar 1 00:06:34.063: %LINEPROTO-5-UPDOWN: Line protocol on Interface FastEthernet0/0, changed state to up
R1(config-if)#int f 0/1
R1(config-if)#ip add 10.0.0.1 255.0.0.0 //僅設(shè)定IP地址與子網(wǎng)掩碼
R1(config-if)#no shut
R1(config-if)#ex
*Mar 1 00:06:48.191: %LINK-3-UPDOWN: Interface FastEthernet0/1, changed state to up
*Mar 1 00:06:49.191: %LINEPROTO-5-UPDOWN: Line protocol on Interface FastEthernet0/1, changed state to up
R1(config)#
為滿足實(shí)驗(yàn)要求,下面將正式進(jìn)行PAT(端口多路復(fù)用)的設(shè)置。
4、在路由R1上進(jìn)行PAT設(shè)置
R1(config)#access-list 1 permit 192.168.100.0 0.0.0.255 //建立標(biāo)準(zhǔn)ACL
R1(config)#ip nat pool kgc 10.0.0.20 10.0.0.20 netmask 255.0.0.0 //建立地址池
*Mar 1 00:08:29.815: %LINEPROTO-5-UPDOWN: Line protocol on Interface NVI0, changed state to up
R1(config)#ip nat inside source list 1 pool kgc //建立PAT
R1(config)#int f 0/1
R1(config-if)#ip nat inside //在內(nèi)部啟用PAT
R1(config-if)#int f 0/0
R1(config-if)#ip nat outside //在外部啟用PAT
R1(config-if)#end
R1#
*Mar 1 00:10:27.007: %SYS-5-CONFIG_I: Configured from console by console
R1#
實(shí)驗(yàn)成功,外網(wǎng)能訪問的IP地址以更改為公網(wǎng)IP。
拓?fù)鋱D如下:
前面所有對(duì)PC1、PC2、PC3、sw以及R1的設(shè)置均與方法一相同,不再過多贅述。這里只對(duì)PAT的設(shè)置與啟用進(jìn)行說明
R1(config)#access-list 1 permit 192.168.100.0 0.0.0.255 //建立標(biāo)準(zhǔn)ACL
R1(config)#ip nat inside source list 1 interface f0/1 overload //不進(jìn)行地址池的設(shè)置,將外部端口f0/1的IP作為對(duì)外全局地址
R1(config)#
R1(config)#int f 0/0
R1(config-if)#ip nat inside //啟用內(nèi)部PAT
R1(config-if)#int f 0/1
R1(config-if)#ip nat outside //啟用外部PAT
R1(config-if)#end
R1#
免責(zé)聲明:本站發(fā)布的內(nèi)容(圖片、視頻和文字)以原創(chuàng)、轉(zhuǎn)載和分享為主,文章觀點(diǎn)不代表本網(wǎng)站立場,如果涉及侵權(quán)請(qǐng)聯(lián)系站長郵箱:is@yisu.com進(jìn)行舉報(bào),并提供相關(guān)證據(jù),一經(jīng)查實(shí),將立刻刪除涉嫌侵權(quán)內(nèi)容。