拓扑图
命令
初始化并配置IP地址
R1
sys
sysname R1
int g0/0/1
ip add 172.16.1.254 24
int g0/0/2
ip add 172.17.1.254 24
int g0/0/0
ip add 202.169.10.1 24
q
R2:
sys
sysname R2
int g0/0/0
ip add 202.169.10.2 24
int loopback 0
ip add 202.169.20.1 24
q
配置静态NAT
R1:
ip route-static 0.0.0.0 0.0.0.0 202.169.10.2
测试PC1 ping R2和R2 ping PC1
int g0/0/0
nat static global 202.169.10.5 inside 172.16.1.1
//写成 nat static global 202.169.20.5 inside 172.16.1.1 就不通
dis nat static
测试PC1 ping R2和R2 ping PC1
R2: ping -a 202.169.20.1 172.16.1.1
2、配置NAT Outbound
R1:
nat addres-group 1 202.169.20.50 202.169.20.60
acl 2001
rule 5 permit 172.17.1.0 0.0.0.255
int g0/0/0
nat outbound 2001 address-group 1 no-pat
dis nat outbound
3、配置NAT Easy-IP
R1:
int g0/0/0
undo nat outbound 2001 address-group 1 nopat
nat outbound 2001
4、配置NAT Server
R1:
int g0/0/0
nat server protocol tcp global 202.169.10.6 ftp inside 172.16.1.3 ftp
q
nat alg ftp enable