<Huawei>SYS
[Huawei]undo info-center enable
[Huawei]sysname R1
[R1]interface g0/0/0
[R1-GigabitEthernet0/0/0]ip address 192.168.1.254 24
[R1-GigabitEthernet0/0/0]undo shutdown
[R1-GigabitEthernet0/0/0]quit
[R1]interface g0/0/1
[R1-GigabitEthernet0/0/1]ip address 100.1.1.1 24
[R1-GigabitEthernet0/0/1]undo shutdown
Info: Interface GigabitEthernet0/0/1 is not shutdown.
[R1-GigabitEthernet0/0/1]quit
[R1]nat address-group 1 100.1.1.3 100.1.1.4 //创建NAT地址池,编号为1,开始的地址为100.1.1.3,结束的地址为100.1.1.4
[R1]acl 2000 //创建ACL,编号为2000
[R1-acl-basic-2000]rule 10 permit source 192.168.1.0 0.0.0.255 //定义规则编号为10,允许192。168.1.0/24
[R1-acl-basic-2000]quit
[R1]interface g0/0/1
[R1-GigabitEthernet0/0/1]nat outbound 2000 address-group 1 //满足ACL 2000的流量通过NAT出去,从地址池1中拿地址
[R1-GigabitEthernet0/0/1]quit
实验的配置及代码如下