[原创]实验：网络地址转换（NAT）

头点什么 · 发表于 2006-3-14 20:36:48

<H1 style="MARGIN: 17pt 0cm 16.5pt" align=center>实验：网络地址转换（NAT）</H1>  SPOTO CCNA实验拓扑： <?xml:namespace prefix = o ns = "urn:schemas-microsoft-com:office:office" /><o:p></o:p> <IMG src="http://www.spoto.net/bbs/images/upfile/2006-3/200631420256.jpg" twffan="done"> 实验设备：二台Cisco2501路由器，路由器R33的S1连接R66的S1，R66提供时钟。<o:p></o:p><o:p> </o:p>IP地址表：<o:p></o:p><TABLE class=MsoTableList5 style="BORDER-RIGHT: medium none; BORDER-TOP: medium none; MARGIN: auto auto auto 5.4pt; BORDER-LEFT: medium none; BORDER-BOTTOM: medium none; BORDER-COLLAPSE: collapse; mso-border-top-alt: solid black .75pt; mso-border-bottom-alt: solid black .75pt; mso-yfti-tbllook: 480; mso-padding-alt: 0cm 5.4pt 0cm 5.4pt; mso-border-insideh: .75pt solid black" cellSpacing=0 cellPadding=0 border=1><TBODY><TR style="mso-yfti-irow: -1; mso-yfti-firstrow: yes"><TD style="BORDER-RIGHT: #ece9d8; PADDING-RIGHT: 5.4pt; BORDER-TOP: black 1pt solid; PADDING-LEFT: 5.4pt; PADDING-BOTTOM: 0cm; BORDER-LEFT: #ece9d8; WIDTH: 90pt; PADDING-TOP: 0cm; BORDER-BOTTOM: black 1.5pt solid; BACKGROUND-COLOR: transparent; mso-border-top-alt: solid black .75pt; mso-border-bottom-alt: solid black 1.5pt" width=120>路由器<o:p></o:p></TD><TD style="BORDER-RIGHT: #ece9d8; PADDING-RIGHT: 5.4pt; BORDER-TOP: black 1pt solid; PADDING-LEFT: 5.4pt; PADDING-BOTTOM: 0cm; BORDER-LEFT: #ece9d8; WIDTH: 36pt; PADDING-TOP: 0cm; BORDER-BOTTOM: black 1.5pt solid; BACKGROUND-COLOR: transparent; mso-border-top-alt: solid black .75pt; mso-border-bottom-alt: solid black 1.5pt" width=48>接口<o:p></o:p></TD><TD style="BORDER-RIGHT: #ece9d8; PADDING-RIGHT: 5.4pt; BORDER-TOP: black 1pt solid; PADDING-LEFT: 5.4pt; PADDING-BOTTOM: 0cm; BORDER-LEFT: #ece9d8; WIDTH: 108pt; PADDING-TOP: 0cm; BORDER-BOTTOM: black 1.5pt solid; BACKGROUND-COLOR: transparent; mso-border-top-alt: solid black .75pt; mso-border-bottom-alt: solid black 1.5pt" width=144>       IP地址<o:p></o:p></TD></TR><TR style="mso-yfti-irow: 0"><TD style="BORDER-RIGHT: #ece9d8; PADDING-RIGHT: 5.4pt; BORDER-TOP: #ece9d8; PADDING-LEFT: 5.4pt; PADDING-BOTTOM: 0cm; BORDER-LEFT: #ece9d8; WIDTH: 90pt; PADDING-TOP: 0cm; BORDER-BOTTOM: black 1pt solid; BACKGROUND-COLOR: transparent; mso-border-top-alt: solid black .75pt; mso-border-bottom-alt: solid black .75pt" width=120>R33<o:p></o:p></TD><TD style="BORDER-RIGHT: #ece9d8; PADDING-RIGHT: 5.4pt; BORDER-TOP: #ece9d8; PADDING-LEFT: 5.4pt; PADDING-BOTTOM: 0cm; BORDER-LEFT: #ece9d8; WIDTH: 36pt; PADDING-TOP: 0cm; BORDER-BOTTOM: black 1pt solid; BACKGROUND-COLOR: transparent; mso-border-top-alt: solid black .75pt; mso-border-bottom-alt: solid black .75pt" width=48>E0<o:p></o:p></TD><TD style="BORDER-RIGHT: #ece9d8; PADDING-RIGHT: 5.4pt; BORDER-TOP: #ece9d8; PADDING-LEFT: 5.4pt; PADDING-BOTTOM: 0cm; BORDER-LEFT: #ece9d8; WIDTH: 108pt; PADDING-TOP: 0cm; BORDER-BOTTOM: black 1pt solid; BACKGROUND-COLOR: transparent; mso-border-top-alt: solid black .75pt; mso-border-bottom-alt: solid black .75pt" width=144><?xml:namespace prefix = st1 ns = "urn:schemas-microsoft-com:office:smarttags" /><st1:chsdate w:st="on" Year="1899" Month="12" Day="30" IsLunarDate="False" IsROCDate="False">  10.1.1</st1:chsdate>.1/24 sec<o:p></o:p></TD></TR><TR style="mso-yfti-irow: 1"><TD style="BORDER-RIGHT: #ece9d8; PADDING-RIGHT: 5.4pt; BORDER-TOP: #ece9d8; PADDING-LEFT: 5.4pt; PADDING-BOTTOM: 0cm; BORDER-LEFT: #ece9d8; WIDTH: 90pt; PADDING-TOP: 0cm; BORDER-BOTTOM: black 1pt solid; BACKGROUND-COLOR: transparent; mso-border-top-alt: solid black .75pt; mso-border-bottom-alt: solid black .75pt" width=120>R33<o:p></o:p></TD><TD style="BORDER-RIGHT: #ece9d8; PADDING-RIGHT: 5.4pt; BORDER-TOP: #ece9d8; PADDING-LEFT: 5.4pt; PADDING-BOTTOM: 0cm; BORDER-LEFT: #ece9d8; WIDTH: 36pt; PADDING-TOP: 0cm; BORDER-BOTTOM: black 1pt solid; BACKGROUND-COLOR: transparent; mso-border-top-alt: solid black .75pt; mso-border-bottom-alt: solid black .75pt" width=48>E0<o:p></o:p></TD><TD style="BORDER-RIGHT: #ece9d8; PADDING-RIGHT: 5.4pt; BORDER-TOP: #ece9d8; PADDING-LEFT: 5.4pt; PADDING-BOTTOM: 0cm; BORDER-LEFT: #ece9d8; WIDTH: 108pt; PADDING-TOP: 0cm; BORDER-BOTTOM: black 1pt solid; BACKGROUND-COLOR: transparent; mso-border-top-alt: solid black .75pt; mso-border-bottom-alt: solid black .75pt" width=144><st1:chsdate w:st="on" Year="1899" Month="12" Day="30" IsLunarDate="False" IsROCDate="False">  10.1.1</st1:chsdate>.2/24 sec<o:p></o:p></TD></TR><TR style="mso-yfti-irow: 2"><TD style="BORDER-RIGHT: #ece9d8; PADDING-RIGHT: 5.4pt; BORDER-TOP: #ece9d8; PADDING-LEFT: 5.4pt; PADDING-BOTTOM: 0cm; BORDER-LEFT: #ece9d8; WIDTH: 90pt; PADDING-TOP: 0cm; BORDER-BOTTOM: black 1pt solid; BACKGROUND-COLOR: transparent; mso-border-top-alt: solid black .75pt; mso-border-bottom-alt: solid black .75pt" width=120>R33<o:p></o:p></TD><TD style="BORDER-RIGHT: #ece9d8; PADDING-RIGHT: 5.4pt; BORDER-TOP: #ece9d8; PADDING-LEFT: 5.4pt; PADDING-BOTTOM: 0cm; BORDER-LEFT: #ece9d8; WIDTH: 36pt; PADDING-TOP: 0cm; BORDER-BOTTOM: black 1pt solid; BACKGROUND-COLOR: transparent; mso-border-top-alt: solid black .75pt; mso-border-bottom-alt: solid black .75pt" width=48>E0<o:p></o:p></TD><TD style="BORDER-RIGHT: #ece9d8; PADDING-RIGHT: 5.4pt; BORDER-TOP: #ece9d8; PADDING-LEFT: 5.4pt; PADDING-BOTTOM: 0cm; BORDER-LEFT: #ece9d8; WIDTH: 108pt; PADDING-TOP: 0cm; BORDER-BOTTOM: black 1pt solid; BACKGROUND-COLOR: transparent; mso-border-top-alt: solid black .75pt; mso-border-bottom-alt: solid black .75pt" width=144><st1:chsdate w:st="on" Year="1899" Month="12" Day="30" IsLunarDate="False" IsROCDate="False">10.1.1</st1:chsdate>.3/24 sec<o:p></o:p></TD></TR><TR style="mso-yfti-irow: 3"><TD style="BORDER-RIGHT: #ece9d8; PADDING-RIGHT: 5.4pt; BORDER-TOP: #ece9d8; PADDING-LEFT: 5.4pt; PADDING-BOTTOM: 0cm; BORDER-LEFT: #ece9d8; WIDTH: 90pt; PADDING-TOP: 0cm; BORDER-BOTTOM: black 1pt solid; BACKGROUND-COLOR: transparent; mso-border-top-alt: solid black .75pt; mso-border-bottom-alt: solid black .75pt" width=120>R33<o:p></o:p></TD><TD style="BORDER-RIGHT: #ece9d8; PADDING-RIGHT: 5.4pt; BORDER-TOP: #ece9d8; PADDING-LEFT: 5.4pt; PADDING-BOTTOM: 0cm; BORDER-LEFT: #ece9d8; WIDTH: 36pt; PADDING-TOP: 0cm; BORDER-BOTTOM: black 1pt solid; BACKGROUND-COLOR: transparent; mso-border-top-alt: solid black .75pt; mso-border-bottom-alt: solid black .75pt" width=48>E0<o:p></o:p></TD><TD style="BORDER-RIGHT: #ece9d8; PADDING-RIGHT: 5.4pt; BORDER-TOP: #ece9d8; PADDING-LEFT: 5.4pt; PADDING-BOTTOM: 0cm; BORDER-LEFT: #ece9d8; WIDTH: 108pt; PADDING-TOP: 0cm; BORDER-BOTTOM: black 1pt solid; BACKGROUND-COLOR: transparent; mso-border-top-alt: solid black .75pt; mso-border-bottom-alt: solid black .75pt" width=144><st1:chsdate w:st="on" Year="1899" Month="12" Day="30" IsLunarDate="False" IsROCDate="False">10.1.1</st1:chsdate>.5/24<o:p></o:p></TD></TR><TR style="mso-yfti-irow: 4"><TD style="BORDER-RIGHT: #ece9d8; PADDING-RIGHT: 5.4pt; BORDER-TOP: #ece9d8; PADDING-LEFT: 5.4pt; PADDING-BOTTOM: 0cm; BORDER-LEFT: #ece9d8; WIDTH: 90pt; PADDING-TOP: 0cm; BORDER-BOTTOM: black 1pt solid; BACKGROUND-COLOR: transparent; mso-border-top-alt: solid black .75pt; mso-border-bottom-alt: solid black .75pt" width=120>R33<o:p></o:p></TD><TD style="BORDER-RIGHT: #ece9d8; PADDING-RIGHT: 5.4pt; BORDER-TOP: #ece9d8; PADDING-LEFT: 5.4pt; PADDING-BOTTOM: 0cm; BORDER-LEFT: #ece9d8; WIDTH: 36pt; PADDING-TOP: 0cm; BORDER-BOTTOM: black 1pt solid; BACKGROUND-COLOR: transparent; mso-border-top-alt: solid black .75pt; mso-border-bottom-alt: solid black .75pt" width=48>S1</TD><TD style="BORDER-RIGHT: #ece9d8; PADDING-RIGHT: 5.4pt; BORDER-TOP: #ece9d8; PADDING-LEFT: 5.4pt; PADDING-BOTTOM: 0cm; BORDER-LEFT: #ece9d8; WIDTH: 108pt; PADDING-TOP: 0cm; BORDER-BOTTOM: black 1pt solid; BACKGROUND-COLOR: transparent; mso-border-top-alt: solid black .75pt; mso-border-bottom-alt: solid black .75pt" width=144>202.100.90.5/24<o:p></o:p></TD></TR><TR style="mso-yfti-irow: 5"><TD style="BORDER-RIGHT: #ece9d8; PADDING-RIGHT: 5.4pt; BORDER-TOP: #ece9d8; PADDING-LEFT: 5.4pt; PADDING-BOTTOM: 0cm; BORDER-LEFT: #ece9d8; WIDTH: 90pt; PADDING-TOP: 0cm; BORDER-BOTTOM: black 1pt solid; BACKGROUND-COLOR: transparent; mso-border-top-alt: solid black .75pt; mso-border-bottom-alt: solid black .75pt" width=120>R66<o:p></o:p></TD><TD style="BORDER-RIGHT: #ece9d8; PADDING-RIGHT: 5.4pt; BORDER-TOP: #ece9d8; PADDING-LEFT: 5.4pt; PADDING-BOTTOM: 0cm; BORDER-LEFT: #ece9d8; WIDTH: 36pt; PADDING-TOP: 0cm; BORDER-BOTTOM: black 1pt solid; BACKGROUND-COLOR: transparent; mso-border-top-alt: solid black .75pt; mso-border-bottom-alt: solid black .75pt" width=48>S1</TD><TD style="BORDER-RIGHT: #ece9d8; PADDING-RIGHT: 5.4pt; BORDER-TOP: #ece9d8; PADDING-LEFT: 5.4pt; PADDING-BOTTOM: 0cm; BORDER-LEFT: #ece9d8; WIDTH: 108pt; PADDING-TOP: 0cm; BORDER-BOTTOM: black 1pt solid; BACKGROUND-COLOR: transparent; mso-border-top-alt: solid black .75pt; mso-border-bottom-alt: solid black .75pt" width=144>202.100.90.6/24<o:p></o:p></TD></TR><TR style="mso-yfti-irow: 6; mso-yfti-lastrow: yes"><TD style="BORDER-RIGHT: #ece9d8; PADDING-RIGHT: 5.4pt; BORDER-TOP: #ece9d8; PADDING-LEFT: 5.4pt; PADDING-BOTTOM: 0cm; BORDER-LEFT: #ece9d8; WIDTH: 90pt; PADDING-TOP: 0cm; BORDER-BOTTOM: black 1pt solid; BACKGROUND-COLOR: transparent; mso-border-top-alt: solid black .75pt; mso-border-bottom-alt: solid black .75pt" width=120>R66<o:p></o:p></TD><TD style="BORDER-RIGHT: #ece9d8; PADDING-RIGHT: 5.4pt; BORDER-TOP: #ece9d8; PADDING-LEFT: 5.4pt; PADDING-BOTTOM: 0cm; BORDER-LEFT: #ece9d8; WIDTH: 36pt; PADDING-TOP: 0cm; BORDER-BOTTOM: black 1pt solid; BACKGROUND-COLOR: transparent; mso-border-top-alt: solid black .75pt; mso-border-bottom-alt: solid black .75pt" width=48>E0<o:p></o:p></TD><TD style="BORDER-RIGHT: #ece9d8; PADDING-RIGHT: 5.4pt; BORDER-TOP: #ece9d8; PADDING-LEFT: 5.4pt; PADDING-BOTTOM: 0cm; BORDER-LEFT: #ece9d8; WIDTH: 108pt; PADDING-TOP: 0cm; BORDER-BOTTOM: black 1pt solid; BACKGROUND-COLOR: transparent; mso-border-top-alt: solid black .75pt; mso-border-bottom-alt: solid black .75pt" width=144>172.16.10.1/24<o:p></o:p></TD></TR></TBODY></TABLE><o:p> </o:p>配制静态内部源地址转换：<o:p></o:p>R33(config)#int s1R33(config-if)#ip add 202.100.90.5 255.255.255.0<o:p></o:p>R33(config-if)#no shutR33(config-if)#int e0R33(config-if)#ip add <st1:chsdate w:st="on" Year="1899" Month="12" Day="30" IsLunarDate="False" IsROCDate="False">10.1.1</st1:chsdate>.5 255.255.255.0R33(config-if)#no shutR33(config-if)#no keepalive                             //禁止端口更新。R33(config-if)#ip add <st1:chsdate w:st="on" Year="1899" Month="12" Day="30" IsLunarDate="False" IsROCDate="False">10.1.1</st1:chsdate>.1 255.255.255.0 secondary   //添加第二个IP地址。R33(config-if)#exit<o:p></o:p>R33(config)#ip route <st1:chsdate w:st="on" Year="1899" Month="12" Day="30" IsLunarDate="False" IsROCDate="False">0.0.0</st1:chsdate>.0 0.0.0.0 serial 1              //配制到R66的默认路由。R33#sh run int e0                                     //查看E0端口配制。<IMG src="http://www.spoto.net/bbs/images/upfile/2006-3/200631420264.jpg" twffan="done">R66(config)#int s1R66(config-if)#ip add 202.100.90.6 255.255.255.0<o:p></o:p>R66(config-if)#clock rate 64000R66(config-if)#no shut<o:p></o:p>R66(config-if)#int e0<o:p></o:p>R66(config-if)#ip add 172.16.10.1 255.255.255.0<o:p></o:p>R66(config-if)#no shutR66(config-if)#no keep<o:p></o:p><o:p> </o:p>R33(config)#ip nat inside source static <st1:chsdate w:st="on" Year="1899" Month="12" Day="30" IsLunarDate="False" IsROCDate="False">10.1.1</st1:chsdate>.1 202.100.90.1      //设置内部本地地址”<st1:chsdate w:st="on" Year="1899" Month="12" Day="30" IsLunarDate="False" IsROCDate="False">10.1.1</st1:chsdate>.1”到外部全局地址”202.100.90.1”的一对一映射。R33(config)#int e0R33(config-if)#ip nat inside                        //设置E0为内部连接端口。R33(config-if)#int s0R33(config-if)#ip nat outside                       //设置S0为外部连接端口。R33(config-if)#endR33#debug ip nat                                //开起查看转换地址的报文信息。R33 #ping                         //用扩展ping命令测试到远端路由器E0口的连接。<IMG src="http://www.spoto.net/bbs/images/upfile/2006-3/2006314202637.jpg" twffan="done">//在源端口”<st1:chsdate w:st="on" Year="1899" Month="12" Day="30" IsLunarDate="False" IsROCDate="False">10.1.1</st1:chsdate>.1”上ping远端路由器E0端口的IP”172.16.10.1”。<o:p> </o:p>//以下是debug ip nat的输出：<IMG src="http://www.spoto.net/bbs/images/upfile/2006-3/2006314202713.jpg" twffan="done">//源地址”<st1:chsdate w:st="on" Year="1899" Month="12" Day="30" IsLunarDate="False" IsROCDate="False">10.1.1</st1:chsdate>.1”被转换为”202.100.90.1”发送到目的地址”172.16.10.1”上；而返回报文的到”202.100.90.1”的目标地址也转回到了”10.1.1.1”。<o:p> </o:p> 配制动态的内部源地址转换：<o:p></o:p>R33#clear ip nat translations *                   //清除所有动态转换。R33#conf t<o:p></o:p>R33(config)#int e0R33(config-if)#ip add <st1:chsdate w:st="on" Year="1899" Month="12" Day="30" IsLunarDate="False" IsROCDate="False">10.1.1</st1:chsdate>.2 255.255.255.0 secondaryR33(config-if)#ip add <st1:chsdate w:st="on" Year="1899" Month="12" Day="30" IsLunarDate="False" IsROCDate="False">10.1.1</st1:chsdate>.3 255.255.255.0 secondary<o:p></o:p>R33(config-if)#exitR33(config)#no ip nat inside source static <st1:chsdate w:st="on" Year="1899" Month="12" Day="30" IsLunarDate="False" IsROCDate="False">10.1.1</st1:chsdate>.1 202.100.90.1  //删除静态地址转换。R33(config)#ip nat pool noding 202.100.90.1 202.100.90.2 netmask 255.255.255.0<o:p></o:p>//配制包含”202.100.90.1－202.100.90.2”IP段的内部全局地址池。R33(config)#ip nat inside source list nod pool noding //为内部源地址应用NAT及ACL。R33(config)#ip access-list standard nod     //配制标准的命名访问控制列表。R33(config-std-nacl)#permit <st1:chsdate w:st="on" Year="1899" Month="12" Day="30" IsLunarDate="False" IsROCDate="False">10.1.1</st1:chsdate>.1R33(config-std-nacl)#permit <st1:chsdate w:st="on" Year="1899" Month="12" Day="30" IsLunarDate="False" IsROCDate="False">10.1.1</st1:chsdate>.2<o:p></o:p>R33(config-std-nacl)#permit <st1:chsdate w:st="on" Year="1899" Month="12" Day="30" IsLunarDate="False" IsROCDate="False">10.1.1</st1:chsdate>.3R33(config-std-nacl)#endR33#ping ……          //分别从源地址”<st1:chsdate w:st="on" Year="1899" Month="12" Day="30" IsLunarDate="False" IsROCDate="False">10.1.1</st1:chsdate>.<st1:chsdate w:st="on" Year="2001" Month="2" Day="3" IsLunarDate="False" IsROCDate="False">1/2/3</st1:chsdate>”扩展ping远端地址”172.16.10.1”。//以下是第三次ping “172.16.10.1”时”debug ip nat”的输出：<IMG src="http://www.spoto.net/bbs/images/upfile/2006-3/2006314202746.jpg" twffan="done">//由于前两次转换，IP地址池中的地址以经全部被分配，结果出现了传输失败、丢包的现象。以下配制的复用内部全局地址可以解决全局IP地址不够用的问题。［此帖子已被头点什么在 2006-3-15 17:36:12 编辑过］

头点什么 · 发表于 2006-3-14 20:37:27

复用内部全局地址：<?xml:namespace prefix = o ns = "urn:schemas-microsoft-com:office:office" /><o:p></o:p>R33#conf t<o:p></o:p>R33(config)#ip nat pool noding 202.100.90.1 202.100.90.1 netmask 255.255.255.0//将地址池中的起始地址与结束地址设为同一个IP。R33(config)#ip nat inside source list nod pool noding overload //复用地址必须在应用R33(config)#end                                      时添加overload（超载）选项。R33#sh run<IMG src="http://www.spoto.net/bbs/images/upfile/2006-3/2006314202826.jpg" twffan="done"><IMG src="http://www.spoto.net/bbs/images/upfile/2006-3/2006314202841.jpg" twffan="done">//查看与NAT相关的全部配制。R33#ping ……           //分别从源地址”<?xml:namespace prefix = st1 ns = "urn:schemas-microsoft-com:office:smarttags" /><st1:chsdate IsROCDate="False" IsLunarDate="False" Day="30" Month="12" Year="1899" w:st="on">10.1.1</st1:chsdate>.<st1:chsdate IsROCDate="False" IsLunarDate="False" Day="3" Month="2" Year="2001" w:st="on">1/2/3</st1:chsdate>”扩展ping远端地址”172.16.10.1”//以下是第三次ping”172.16.10.1”时”debug ip nat”的输出：<IMG src="http://www.spoto.net/bbs/images/upfile/2006-3/200631420295.jpg" twffan="done">//没有出现传输失败，而且三次转换都使用”202.100.90.1”的全局地址。R33#sh ip nat translations                      //显示所有激活的NAT转换<IMG src="http://www.spoto.net/bbs/images/upfile/2006-3/2006314202940.jpg" twffan="done">  配制目的地址流轮转换：<o:p></o:p>//假设地址”<st1:chsdate IsROCDate="False" IsLunarDate="False" Day="30" Month="12" Year="1899" w:st="on">10.1.1</st1:chsdate>.1”与”10.1.1.2”为R33上的两台服务器，配制成功后路由器R66到R33的telnet连接将通过一个虚拟主机将目的地址轮流转换到这两个服务器上。R33(config)#line vty 0 4R33(config-line)#pass spoto<o:p></o:p>R33(config-line)#login<o:p></o:p><o:p> </o:p>R66(config)#ip route <st1:chsdate IsROCDate="False" IsLunarDate="False" Day="30" Month="12" Year="1899" w:st="on">0.0.0</st1:chsdate>.0 0.0.0.0 serial 1<o:p></o:p>R66(config)#endR66#telnet <st1:chsdate IsROCDate="False" IsLunarDate="False" Day="30" Month="12" Year="1899" w:st="on">10.1.1</st1:chsdate>.5<o:p></o:p><o:p> </o:p>R33#clear ip nat translations *R33(config)#no ip nat pool noding            //删除地址池。R33(config)#ip nat pool noding <st1:chsdate IsROCDate="False" IsLunarDate="False" Day="30" Month="12" Year="1899" w:st="on">10.1.1</st1:chsdate>.1 10.1.1.2 prefix-length 24 type rotary //旋转池。R33(config)#ip nat inside destination list nod pool nodingR33(config-ipnat-pool)#endR33(config)#ip access-list standard nod<o:p></o:p>R33(config-std-nacl)#no permit <st1:chsdate IsROCDate="False" IsLunarDate="False" Day="30" Month="12" Year="1899" w:st="on">10.1.1</st1:chsdate>.1      //删除列表中添加过的语句。R33(config-std-nacl)#no permit <st1:chsdate IsROCDate="False" IsLunarDate="False" Day="30" Month="12" Year="1899" w:st="on">10.1.1</st1:chsdate>.2<o:p></o:p>R33(config-std-nacl)#no permit <st1:chsdate IsROCDate="False" IsLunarDate="False" Day="30" Month="12" Year="1899" w:st="on">10.1.1</st1:chsdate>.3R33(config-std-nacl)#permit <st1:chsdate IsROCDate="False" IsLunarDate="False" Day="30" Month="12" Year="1899" w:st="on">10.1.1</st1:chsdate>.110      //允许虚拟主机”10.1.1.110”。 R33(config-std-nacl)#end<o:p> </o:p>R66#telnet <st1:chsdate IsROCDate="False" IsLunarDate="False" Day="30" Month="12" Year="1899" w:st="on">10.1.1</st1:chsdate>.110                  //从路由器R66远程登录到R33的虚拟主机上。//以下是debug ip nat 在路由器R33的输出：<IMG src="http://www.spoto.net/bbs/images/upfile/2006-3/2006314203014.jpg" twffan="done">//源地址”202.100.90.6”到虚拟主机”<st1:chsdate IsROCDate="False" IsLunarDate="False" Day="30" Month="12" Year="1899" w:st="on">10.1.1</st1:chsdate>.110”的连接被转换为”10.1.1.1”。R66#telnet <st1:chsdate IsROCDate="False" IsLunarDate="False" Day="30" Month="12" Year="1899" w:st="on">10.1.1</st1:chsdate>.110                     //第二次telnet<IMG src="http://www.spoto.net/bbs/images/upfile/2006-3/2006314203043.jpg" twffan="done">//debug显示第二次telnet被转换到第二个服务器”<st1:chsdate IsROCDate="False" IsLunarDate="False" Day="30" Month="12" Year="1899" w:st="on">10.1.1</st1:chsdate>.2”，它们之间是轮流转换的模式。R33#sh ip nat translations<IMG src="http://www.spoto.net/bbs/images/upfile/2006-3/2006314203119.jpg" twffan="done">//观察外部全局地址”202.100.90.6”使用23端口登录到虚拟主机”<st1:chsdate IsROCDate="False" IsLunarDate="False" Day="30" Month="12" Year="1899" w:st="on">10.1.1</st1:chsdate>.110”最后再转换到内部本地地址”10.1.1.1”和”10.1.1.2”的过程。R33#sh ip nat statistics<IMG src="http://www.spoto.net/bbs/images/upfile/2006-3/2006314203144.jpg" twffan="done">//命令显示所有应用的转换。<o:p></o:p>R33#clear ip nat translation *<o:p></o:p>R33#conf t<o:p></o:p>R33(config)#no ip nat pool noding<o:p></o:p>R33(config)#no ip nat inside source list nodR33(config)#no ip access-list standard nod<o:p> </o:p><o:p></o:p> 实验总结：配制NAT的基本步骤：1.设置物理接口的类型（IN/OUT）；2.建立地址池；3.建立访问控制列表；4.为源地址应用NAT及访问控制列表。<o:p></o:p>

――THE END――    ［此帖子已被头点什么在 2006-6-23 14:56:38 编辑过］

fzdd · 发表于 2006-3-14 22:31:07

顶！接口S0跟S1有点不对

mayday · 发表于 2006-3-14 22:47:56

顶顶顶顶顶顶！！！！！！~

mayday · 发表于 2006-3-14 22:49:57

谢谢啦  整理的好辛苦吧   地址轮寻还有不太理解      我去找点资料看看   ［此帖子已被 mayday 在 2006-3-14 23:23:44 编辑过］

头点什么 · 发表于 2006-3-14 22:50:22

<BLOCKQUOTE>引用：<HR>原文由 fzdd 发表于 2006-3-14 22:31:07 : 顶！接口S0跟S1有点不对<HR></BLOCKQUOTE>            哎，改过来了。

头点什么 · 发表于 2006-3-15 21:02:13

是，教材里有就拿出来做做。

一等良民 · 发表于 2006-6-24 20:50:09

<BLOCKQUOTE>引用：<HR>原文由 rainypan 发表于 2006-3-15 19:41:51 : 地址轮询现在还没有要求吧 <HR></BLOCKQUOTE>不会吧~~!不是有要求吗？

single · 发表于 2006-6-28 09:36:51

<IMG src="http://www.spoto.net/bbs/images/Emotions/2.gif">歌不错！

紫ぁ梦 · 发表于 2007-2-6 00:58:55

[em04]好详细哦～～～～～～～～～好崇拜～～～～～～归纳大王哦～很认真的一个人～！

账号		自动登录	找回密码
密码			立即注册