一、基本配置
1.搭建拓扑,启动设备
2.Pc机和Server1配置IP地址、子网掩膜和网关
3.AR1和AR2配置IP地址
注意ar2的Loo0的配置
[ar2]intLoopBack0
[ar2-LoopBack0]ipaddress200.0.1.124
4.AR1和AR2配置静态路由
[ar1]iproute-static200.0.0.024200.0.0.2
[ar2]iproute-static192.168.1.024200.0.0.1
[ar2]iproute-static192.168.2.024200.0.0.1
二、AR1的接口动态NAT(地址池:200.0.0.30~40)
[ar1]nataddress-group1200.0.0.30200.0.0.40
[ar1]acl2000
[ar1-acl-basic-2000]rulepermitsource192.168.1.00.0.0.255
[ar1-acl-basic-2000]rulepermitsource192.168.2.00.0.0.255
[ar1-GigabitEthernet0/0/0]natoutbound2000address-group1no-pat
[ar1]disnataddress-group
[ar1]disnataddress-groupverbose
在AR1的两侧抓包查看IP报文的信息,验证NAT的效果