enspNAT地址转换

最新推荐文章于 2024-04-21 14:26:35 发布

南南很难

最新推荐文章于 2024-04-21 14:26:35 发布

阅读量1.7k

点赞数 1

分类专栏： ensp

本文链接：https://blog.csdn.net/jjc321506301915/article/details/115329610

版权

ensp 专栏收录该内容

9 篇文章 8 订阅

订阅专栏

#作业七：#

##实验一：静态NAT和动态NAT的配置

实验环境

实验思路

1. 规划并配置IP
1. 静态配置
1. 配置静态NAT和动态NAT
1. 检查连通性

具体实施

规划并配置IP

PC1:

PC2:

AR1:

[AR1]int g0/0/1
[AR1-GigabitEthernet0/0/1]ip add 192.168.1.254 24
[AR1-GigabitEthernet0/0/1]int g0/0/2
[AR1-GigabitEthernet0/0/1]ip add 192.168.2.254 24
[AR1-GigabitEthernet0/0/1]int g0/0/0
[AR1-GigabitEthernet0/0/0]ip add 10.1.13.1 24

AR2:

[AR2]int g0/0/1
[AR2-GigabitEthernet0/0/1]ip add 10.1.13.2 24
[AR2-GigabitEthernet0/0/1]int g0/0/0
[AR2-GigabitEthernet0/0/0]ip add 200.1.12.1 24

AR3:

[AR3]int g0/0/0
[AR3-GigabitEthernet0/0/0]ip add 200.1.12.2 24
[AR3-GigabitEthernet0/0/0]int lo 0
[AR3-LoopBack0]ip add 3.3.3.3 32

静态配置

AR1:

[AR1]ip route-static 0.0.0.0 0 10.1.13.2

AR2:

[AR2]ip route-static 192.168.1.0 24 10.1.13.1
[AR2]ip route-static 192.168.2.0 24 10.1.13.1
[AR2]ip route-static 0.0.0.0 0 200.1.12.2

配置静态NAT和动态NAT

配置静态NAT：

AR2:

[AR2]int g0/0/0
[AR2-GigabitEthernet0/0/0]nat static global 200.1.12.5 inside 192.168.1.1	
[AR2-GigabitEthernet0/0/0]nat static global 200.1.12.6 inside 192.168.2.1

配置动态NAT：

AR3:

[AR2-GigabitEthernet0/0/1]undo nat static global 200.1.12.5 inside 192.168.1.1
[AR2-GigabitEthernet0/0/1]undo nat static global 200.1.12.6 inside 192.168.2.1    //删除静态配置
[AR2-GigabitEthernet0/0/1]q
[AR2]nat address-group 1 200.1.12.5 200.1.12.10  //创建地址池
[AR2]acl 2000   //配置地址转换的ACL规则
[AR2-acl-basic-2000]rule permit source 192.168.1.0 0.0.0.255
[AR2-acl-basic-2000]rule permit source 192.168.2.0 0.0.0.255
[AR2-acl-basic-2000]q	
[AR2]int g0/0/1
[AR2-GigabitEthernet0/0/1]nat outbound 2000 address-group 1 no-pat

检查连通性

#####配置静态NAT后 PC1 ping AR3 #####

PC>ping 3.3.3.3

Ping 3.3.3.3: 32 data bytes, Press Ctrl_C to break
Request timeout!
Request timeout!
From 3.3.3.3: bytes=32 seq=3 ttl=253 time=655 ms
From 3.3.3.3: bytes=32 seq=4 ttl=253 time=109 ms
From 3.3.3.3: bytes=32 seq=5 ttl=253 time=31 ms

  --- 3.3.3.3 ping statistics ---
  5 packet(s) transmitted
  3 packet(s) received
  40.00% packet loss
  round-trip min/avg/max = 0/265/655 ms

#####配置静态NAT后 PC2 ping AR3 #####

PC>ping 3.3.3.3

Ping 3.3.3.3: 32 data bytes, Press Ctrl_C to break
From 3.3.3.3: bytes=32 seq=1 ttl=253 time=63 ms
From 3.3.3.3: bytes=32 seq=2 ttl=253 time=31 ms
From 3.3.3.3: bytes=32 seq=3 ttl=253 time=31 ms
From 3.3.3.3: bytes=32 seq=4 ttl=253 time=32 ms
From 3.3.3.3: bytes=32 seq=5 ttl=253 time=47 ms

  --- 3.3.3.3 ping statistics ---
  5 packet(s) transmitted
  5 packet(s) received
  0.00% packet loss
  round-trip min/avg/max = 31/40/63 ms

#####配置动态NAT后 PC1 ping AR3 #####

PC>ping 3.3.3.3

Ping 3.3.3.3: 32 data bytes, Press Ctrl_C to break
From 3.3.3.3: bytes=32 seq=1 ttl=253 time=31 ms
From 3.3.3.3: bytes=32 seq=2 ttl=253 time=31 ms
From 3.3.3.3: bytes=32 seq=3 ttl=253 time=63 ms
From 3.3.3.3: bytes=32 seq=4 ttl=253 time=47 ms
From 3.3.3.3: bytes=32 seq=5 ttl=253 time=63 ms

  --- 3.3.3.3 ping statistics ---
  5 packet(s) transmitted
  5 packet(s) received
  0.00% packet loss
  round-trip min/avg/max = 31/47/63 ms

PC1 ping AR3 抓包#####

** 图中请求应答报文发送方是200.1.12.5，接收方是3.3.3.3，应答报文发送方是3.3.3.3，接收方是200.1.12.5，体现了外网地址之间的报文传递。 **

** 图中请求应答报文发送方是192.168.1.1，接收方是3.3.3.3，应答报文发送方是3.3.3.3，接收方是192.168.1.1，体现了内网地址之间的报文传递。 **

#####配置动态NAT后 PC2 ping AR3 #####

PC>ping 3.3.3.3

Ping 3.3.3.3: 32 data bytes, Press Ctrl_C to break
From 3.3.3.3: bytes=32 seq=1 ttl=253 time=31 ms
From 3.3.3.3: bytes=32 seq=2 ttl=253 time=31 ms
From 3.3.3.3: bytes=32 seq=3 ttl=253 time=32 ms
From 3.3.3.3: bytes=32 seq=4 ttl=253 time=31 ms
From 3.3.3.3: bytes=32 seq=5 ttl=253 time=46 ms

  --- 3.3.3.3 ping statistics ---
  5 packet(s) transmitted
  5 packet(s) received
  0.00% packet loss
  round-trip min/avg/max = 31/34/46 ms

PC2 ping AR3 抓包#####

** 图中请求应答报文发送方是200.1.12.5，接收方是3.3.3.3，应答报文发送方是3.3.3.3，接收方是200.1.12.5，体现了内网地址之间的报文传递。 **

** 图中请求应答报文发送方是192.168.2.1，接收方是3.3.3.3，应答报文发送方是3.3.3.3，接收方是192.168.2.1，体现了内网地址之间的报文传递。 **

##实验二：NAPT以及EASY IP的配置

配置NAPT：

AR2:

[AR2]int g0/0/1
[AR2-GigabitEthernet0/0/1]undo nat outbound 2000 address-group 1
[AR2-GigabitEthernet0/0/1]q
[AR2]undo nat address-group 1
[AR2]nat address-group 1 200.1.12.10 200.1.12.10   //设置动态地址池中只有一个IP
[AR2]int g0/0/1
[AR2-GigabitEthernet0/0/1]nat outbound 2000 address-group 1

检查连通性：

#####配置NAPT后 PC1 ping AR3 #####

PC>ping 3.3.3.3

Ping 3.3.3.3: 32 data bytes, Press Ctrl_C to break
From 3.3.3.3: bytes=32 seq=1 ttl=253 time=47 ms
From 3.3.3.3: bytes=32 seq=2 ttl=253 time=15 ms
From 3.3.3.3: bytes=32 seq=3 ttl=253 time=31 ms
From 3.3.3.3: bytes=32 seq=4 ttl=253 time=47 ms
From 3.3.3.3: bytes=32 seq=5 ttl=253 time=31 ms

  --- 3.3.3.3 ping statistics ---
  5 packet(s) transmitted
  5 packet(s) received
  0.00% packet loss
  round-trip min/avg/max = 15/34/47 ms

PC1 ping AR3 抓包#####

#####配置NAPT后 PC2 ping AR3 #####

PC>ping 3.3.3.3

Ping 3.3.3.3: 32 data bytes, Press Ctrl_C to break
From 3.3.3.3: bytes=32 seq=1 ttl=253 time=31 ms
From 3.3.3.3: bytes=32 seq=2 ttl=253 time=16 ms
From 3.3.3.3: bytes=32 seq=3 ttl=253 time=31 ms
From 3.3.3.3: bytes=32 seq=4 ttl=253 time=32 ms
From 3.3.3.3: bytes=32 seq=5 ttl=253 time=31 ms

   --- 3.3.3.3 ping statistics ---
  5 packet(s) transmitted
  5 packet(s) received
  0.00% packet loss
  round-trip min/avg/max = 16/28/32 ms

PC2 ping AR3 抓包#####

[外链图片转存失败,源站可能有防盗链机制,建议将图片保存下来直接上传(img-0RwEqTCH-1617093478709)(http://mmbiz.qpic.cn/sz_mmbiz_jpg/VKUqMIR6CGVdAHpyPZEEOJVzKTLfX1mFlY200hfOyade19ejwYuBaonzoPoI9EXLvEXv5oTaRbaYsdQR7RxolQ/0)]

配置EASY IP：

AR2:

[AR2-GigabitEthernet0/0/1]undo nat outbound 2000 address-group 1
[AR2-GigabitEthernet0/0/1]nat outbound 2000

检查连通性：

#####配置EASY IP后 PC1 ping AR3 #####

PC>ping 3.3.3.3

Ping 3.3.3.3: 32 data bytes, Press Ctrl_C to break
From 3.3.3.3: bytes=32 seq=1 ttl=253 time=31 ms
From 3.3.3.3: bytes=32 seq=2 ttl=253 time=31 ms
From 3.3.3.3: bytes=32 seq=3 ttl=253 time=32 ms
From 3.3.3.3: bytes=32 seq=4 ttl=253 time=16 ms
From 3.3.3.3: bytes=32 seq=5 ttl=253 time=47 ms

  --- 3.3.3.3 ping statistics ---
  5 packet(s) transmitted
  5 packet(s) received
  0.00% packet loss
  round-trip min/avg/max = 16/31/47 ms

PC1 ping AR3 抓包#####

[外链图片转存失败,源站可能有防盗链机制,建议将图片保存下来直接上传(img-yFChFqcx-1617093478711)(http://mmbiz.qpic.cn/sz_mmbiz_jpg/VKUqMIR6CGVdAHpyPZEEOJVzKTLfX1mF4OlzvbicN0v16MkY8JMzfP7OXicL3N8uENk2oyv8bRNicZ057RVbG9x9Q/0)]

#####配置EASY IP后 PC2 ping AR3 #####

PC>ping 3.3.3.3

Ping 3.3.3.3: 32 data bytes, Press Ctrl_C to break
From 3.3.3.3: bytes=32 seq=1 ttl=253 time=31 ms
From 3.3.3.3: bytes=32 seq=2 ttl=253 time=31 ms
From 3.3.3.3: bytes=32 seq=3 ttl=253 time=31 ms
From 3.3.3.3: bytes=32 seq=4 ttl=253 time=32 ms
From 3.3.3.3: bytes=32 seq=5 ttl=253 time=47 ms

  --- 3.3.3.3 ping statistics ---
  5 packet(s) transmitted
  5 packet(s) received
  0.00% packet loss
  round-trip min/avg/max = 31/34/47 ms

PC2 ping AR3 抓包#####

##实验三：NAT Server的配置

配置NAT Server：

AR2:

[AR2]int g0/0/1
[AR2-GigabitEthernet0/0/1]undo nat outbound 2000 address-group 1
[AR2-GigabitEthernet0/0/1]nat server protocol icmp global 200.1.12.5 inside 192.
 168.1.1
[AR2-GigabitEthernet0/0/1]nat server protocol icmp global 200.1.12.6 inside 192.
 168.2.1

检查连通性：

#####配置NAT Server后 AR3 ping PC1 #####

<AR3>ping 200.1.12.5
  PING 200.1.12.5: 56  data bytes, press CTRL_C to break
Request time out
Reply from 200.1.12.5: bytes=56 Sequence=2 ttl=126 time=40 ms
Reply from 200.1.12.5: bytes=56 Sequence=3 ttl=126 time=40 ms
Reply from 200.1.12.5: bytes=56 Sequence=4 ttl=126 time=50 ms
Reply from 200.1.12.5: bytes=56 Sequence=5 ttl=126 time=40 ms

  --- 200.1.12.5 ping statistics ---
5 packet(s) transmitted
4 packet(s) received
 20.00% packet loss
round-trip min/avg/max = 40/42/50 ms

AR3 ping PC1 抓包#####

#####配置NAT Server后 AR3 ping PC2 #####

<AR3>ping 200.1.12.6
  PING 200.1.12.6: 56  data bytes, press CTRL_C to break
Reply from 200.1.12.6: bytes=56 Sequence=1 ttl=126 time=50 ms
Reply from 200.1.12.6: bytes=56 Sequence=2 ttl=126 time=40 ms
Reply from 200.1.12.6: bytes=56 Sequence=3 ttl=126 time=30 ms
Reply from 200.1.12.6: bytes=56 Sequence=4 ttl=126 time=40 ms
Reply from 200.1.12.6: bytes=56 Sequence=5 ttl=126 time=90 ms

  --- 200.1.12.6 ping statistics ---
5 packet(s) transmitted
5 packet(s) received
 0.00% packet loss
round-trip min/avg/max = 30/50/90 ms

AR3 ping PC2 抓包#####

实验总结

本次实验学习了NAT的原理和配置方法，在私有网络使用私有地址，在公有网络使用公有地址，通过私有地址结合NAT技术可以有效解决共有地址短缺的问题。共分有静态NAT，动态NAT，NATP，Easy IP以及NAT Sever几种配置方法。

静态NAT：私有地址与公有地址一一映射，能够双向互访。但在设备过多时难以配置且在不使用时占用公有地址资源。
动态NAT：将可用的公有地址组成地址池，避免公有地址资源的浪费。但在地址池中转换地址时不会转换端口号，严格来讲私有地址与公有地址还是一一映射的关系。
NATP：在地址池中转换地址的同时也转换端口号，从而使私有地址与公有地址成一对多的关系。
Easy IP：原理同NATP，但没有地址池，使用接口地址作为公有地址，应用最为广泛。
NAT Sever：将内网服务器映射到公网，外网主机能主动访问内网服务器。

静态NAT：私有地址与公有地址一一映射，能够双向互访。但在设备过多时难以配置且在不使用时占用公有地址资源。
动态NAT：将可用的公有地址组成地址池，避免公有地址资源的浪费。但在地址池中转换地址时不会转换端口号，严格来讲私有地址与公有地址还是一一映射的关系。
NATP：在地址池中转换地址的同时也转换端口号，从而使私有地址与公有地址成一对多的关系。
Easy IP：原理同NATP，但没有地址池，使用接口地址作为公有地址，应用最为广泛。
NAT Sever：将内网服务器映射到公网，外网主机能主动访问内网服务器。

南南很难

关注

1
点赞
踩
14

收藏

觉得还不错? 一键收藏
0
评论
enspNAT地址转换

#作业七：###实验一：静态NAT和动态NAT的配置实验环境实验思路规划并配置IP静态配置配置静态NAT和动态NAT检查连通性具体实施规划并配置IPPC1:PC2:AR1:[AR1]int g0/0/1[AR1-GigabitEthernet0/0/1]ip add 192.168.1.254 24[AR1-GigabitEthernet0/0/1]int g0/0/2[AR1-GigabitEthernet0/0/1]ip add
复制链接

扫一扫