ÖÐÎÄ
ÖÐÎÄ
Ðû²¼Ê±¼ä£º2013-09-11
µã»÷Á¿£º5545¹¦Ð§ÏÈÈÝ£º
NATµØµã³Øת»» ͨ¹ý ¹«ÍøµØµã³ØµÄIPµØµã+¶Ë¿ÚºÅÀ´¶ÔÓ¦ºÍÇø±ð¸÷¸öÊý¾ÝÁ÷¾ÙÐÐÍøÂçµØµãת»»£¬£¬ £¬£¬£¬£¬ÒÔµÖ´ï¶àÄÚ²¿Ö÷»úͨ¹ýÉÙÁ¿¹«ÍøIPµØµãÀ´»á¼ûÍⲿÍøÂçµÄÄ¿µÄ¡£¡£¡£¡£¡£¡£¡£ ¡£
Ó¦Óó¡¾°£º
Æóҵͨ¹ý×âÓÃÔËÓªÉ̵ÄרÏßÉÏÍø£¬£¬ £¬£¬£¬£¬µ±Óжà¸ö¹«ÍøIPµØµãµÄʱ¼ä£¬£¬ £¬£¬£¬£¬Í¨¹ý°Ñ¶à¸ö¹«ÍøIPµØµã·Åµ½¹«ÍøµØµã³Ø£¬£¬ £¬£¬£¬£¬°ÑÄÚÍøÓû§µÄµØµãת»»³É¹«ÍøµØµã³ØÄÚÀïµÄIPµØµã£¬£¬ £¬£¬£¬£¬Ê¹ÄÚÍøÓû§Äܹ»»á¼ûÍâÍø¡£¡£¡£¡£¡£¡£¡£ ¡£
Ò»¡¢×éÍøÐèÇó
ÄÚÍøµØµãͨ¹ýNAT£¬£¬ £¬£¬£¬£¬×ª»»³É¹«ÍøµØµã³ØµÄµØµã£¬£¬ £¬£¬£¬£¬Ê¹ÄÚÍøÄܹ»Õý³£»á¼ûÍâÍø¡£¡£¡£¡£¡£¡£¡£ ¡£
¶þ¡¢×éÍøÍØÆË
Èý¡¢ÉèÖÃÒªµã
1¡¢»ù±¾ipµØµãÉèÖÃ
2¡¢»ù±¾µÄip·ÓÉÉèÖÃ
3¡¢½ç˵natµÄÄÚÍø¿ÚºÍÍâÍø¿Ú
4¡¢ÔÚR1ÉÏÉèÖÃACL£¬£¬ £¬£¬£¬£¬°ÑÄÚÍøÐèÒª¾ÙÐÐNATת»»µÄÁ÷Á¿Æ¥Åä³öÀ´
5¡¢ÉèÖù«ÍøµØµã³Ø
6¡¢ÉèÖÃnatת»»Õ½ÂÔ
ËÄ¡¢ÉèÖð취
1¡¢»ù±¾ipµØµãÉèÖÃ
Ruijie(config)#hostname R1
R1(config)#interface gigabitEthernet 0/0
R1(config-GigabitEthernet 0/0)#ip address 192.168.1.1 255.255.255.0
R1(config-GigabitEthernet 0/0)#exit
R1(config)#interface gigabitEthernet 0/1
R1(config-GigabitEthernet 0/1)#ip address 192.168.2.1 255.255.255.0
R1(config-GigabitEthernet 0/1)#exit
Ruijie(config)#hostname R2
R2(config)#interface gigabitEthernet 0/0
R2(config-GigabitEthernet 0/0)#ip address 192.168.1.2 255.255.255.0
R2(config-GigabitEthernet 0/0)#exit
R2(config)#interface gigabitEthernet 0/1
R2(config-GigabitEthernet 0/1)#ip address 172.16.1.1 255.255.255.0
R2(config-GigabitEthernet 0/1)#exit
R2(config)#interface gigabitEthernet 0/2
R2(config-GigabitEthernet 0/2)#ip address 172.16.2.1 255.255.255.0
R2(config-GigabitEthernet 0/2)#exit
Ruijie(config)#hostname R3
R3(config)#interface fastEthernet 0/0
R3(config-if-FastEthernet 0/0)#ip address 192.168.2.2 255.255.255.0
R3(config-if-FastEthernet 0/0)#exit
2¡¢»ù±¾µÄip·ÓÉÉèÖÃ
R1(config)#ip route 172.16.0.0 255.255.0.0 192.168.1.2
R1(config)#ip route 100.1.1.0 255.255.255.0 192.168.2.2
R2(config)#ip route 100.1.1.0 255.255.255.0 192.168.1.1
3¡¢½ç˵natµÄÄÚÍø¿ÚºÍÍâÍø¿Ú
R1(config)#interface gigabitEthernet 0/1
R1(config-GigabitEthernet 0/1)#ip nat outside //ÉèÖÃnatµÄÍâÍø¿Ú
R1(config-GigabitEthernet 0/1)#exit
R1(config)#int gigabitEthernet 0/0
R1(config-GigabitEthernet 0/0)#ip nat inside //ÉèÖÃnatµÄÄÚÍø¿Ú
R1(config-GigabitEthernet 0/0)#exit
4¡¢ÔÚR1ÉÏÉèÖÃACL£¬£¬ £¬£¬£¬£¬°ÑÄÚÍøÐèÒª¾ÙÐÐNATת»»µÄÁ÷Á¿Æ¥Åä³öÀ´
R1(config)#ip access-list standard 10
R1(config-std-nacl)#10 permit 172.16.1.0 0.0.0.255
R1(config-std-nacl)#20 permit 172.16.2.0 0.0.0.255
R1(config-std-nacl)#exit
5¡¢ÉèÖù«ÍøµØµã³Ø
×¢ÖØ£º
1£©¹«ÍøµØµã³ØµÄµØµã£¬£¬ £¬£¬£¬£¬·×Æ綨Ҫ¸úÍâÍø¿ÚµÄµØµãÔÚͳһ¸öÍø¶Î£¬£¬ £¬£¬£¬£¬Ö»ÒªÊÇÍâÍø·ÖÅɵĿÉÓÃipµØµã¾Í¿ÉÒÔ¡£¡£¡£¡£¡£¡£¡£ ¡£
2£©¹«ÍøµØµãµÄÆðʼipµØµãºÍ¿¢ÊÂipµØµã¿ÉÒÔ²»Ò»Á¬
R1(config)#ip nat pool ruijie netmask 255.255.255.0 //ÉèÖÃÒ»¸öÃû×ÖΪruijieµÄ¹«ÍøµØµã³Ø
R1(config-ipnat-pool)#address 192.168.2.10 192.168.2.11 //¹«ÍøµØµãµÄÆðʼipµØµã£¬£¬ £¬£¬£¬£¬¿¢ÊÂipµØµã
R1(config-ipnat-pool)#address 192.168.2.15 192.168.2.15 //ÈôÓжà¸ö¹«ÍøµØµã£¬£¬ £¬£¬£¬£¬¿ÉÊDz»Ò»Á¬£¬£¬ £¬£¬£¬£¬¿ÉÒÔÉèÖöà¸ö¹«ÍøµØµã¶Î
R1(config-ipnat-pool)#exit
6¡¢ÉèÖÃnatת»»Õ½ÂÔ
R1(config)#ip nat inside source list 10 pool ruijie overload //½«acl 10Æ¥ÅäµÄÁ÷Á¿£¬£¬ £¬£¬£¬£¬Ö´ÐÐnatת»»£¬£¬ £¬£¬£¬£¬×ª»»³ÉµØµã³ØruijieÄÚÀïµÄµØµã
×¢ÖØ£º
overload²ÎÊýÊÇÖ´ÐÐnatÖØÔصļÄÒ壬£¬ £¬£¬£¬£¬Èô²»¼ÓoverloadÊÇÖ´Ðж¯Ì¬µÄipÒ»¶ÔÒ»Ó³É䣬£¬ £¬£¬£¬£¬²»»áÖ´Ðж˿Úת»»£¬£¬ £¬£¬£¬£¬²»¿É½â¾ö¹«ÍøµØµã²»·óµÄÎÊÌâ¡£¡£¡£¡£¡£¡£¡£ ¡£ÈôÊÇÔÚÍøÂç³ö¿ÚÖ´ÐÐNAT£¬£¬ £¬£¬£¬£¬ÊÇΪÏàʶ¾ö¹«ÍøµØµã²»·óµÄÎÊÌ⣬£¬ £¬£¬£¬£¬±ØÐèÒª¼Óoverload²ÎÊý¡£¡£¡£¡£¡£¡£¡£ ¡£
Îå¡¢ÉèÖÃÑéÖ¤
²âÊÔÄÚÍøÄÜ·ñÕý³£»á¼ûÍâÍø£¬£¬ £¬£¬£¬£¬ÈôÄÚÍøPC¿ÉÒÔÕý³£»á¼ûÍâÍø£¬£¬ £¬£¬£¬£¬ÔòNATÉèÖÃ׼ȷ¡£¡£¡£¡£¡£¡£¡£ ¡£ÔÚ³ö¿Ú·ÓÉÆ÷ÉÏÉó²éNATת»»±íÏîÈçÏ£º
ÎĵµÆÀ¼Û
