配置NAT

拓扑图

命令

初始化并配置IP地址
R1
sys
sysname R1
int g0/0/1
ip add 172.16.1.254 24
int g0/0/2
ip add 172.17.1.254 24
int g0/0/0
ip add 202.169.10.1 24
q

R2:
sys
sysname R2
int  g0/0/0
ip add 202.169.10.2 24
int loopback 0
ip add 202.169.20.1 24
q

配置静态NAT
R1:
ip route-static 0.0.0.0 0.0.0.0 202.169.10.2
测试PC1 ping R2和R2 ping PC1

int g0/0/0
nat static global 202.169.10.5 inside 172.16.1.1  
//写成 nat static global 202.169.20.5 inside 172.16.1.1 就不通

dis nat static
测试PC1 ping R2和R2 ping PC1
R2： ping -a 202.169.20.1 172.16.1.1

2、配置NAT Outbound
R1:
nat addres-group 1 202.169.20.50 202.169.20.60
acl 2001
rule 5 permit 172.17.1.0 0.0.0.255
int g0/0/0
nat outbound 2001 address-group 1 no-pat

dis nat outbound

3、配置NAT Easy-IP
R1:
int g0/0/0
undo nat outbound 2001 address-group 1 nopat
nat outbound 2001

4、配置NAT Server
R1:
int g0/0/0
nat server protocol tcp global 202.169.10.6 ftp inside 172.16.1.3 ftp
q
nat alg ftp enable