静态NAT实验-内网外网相互访问

配置路由器CPE：

Router>enable

Router#configure terminal

Enter configuration commands, one perline. End with CNTL/Z.

Router(config)#no logging console

Router(config)#interface fa0/1

Router(config-if)#ip address 192.168.21.254255.255.255.0

Router(config-if)#no shutdown

Router(config-if)#interface s0/0

Router(config-if)#ip address 210.28.21.1255.255.255.0

Router(config-if)#no shutdown

%LINK-5-CHANGED: Interface Serial0/0, changedstate to down

Router(config-if)#exit

Router(config)#ip route 0.0.0.0 0.0.0.0210.28.21.2 //配置静态路由去外网

配置路由器ISP：（关键部位）

Router>enable

Router#configure terminal

Enter configuration commands, one perline. End with CNTL/Z.

Router(config)#no logging console

Router(config)#interface fa0/0

Router(config-if)#ip address 172.16.21.254255.255.255.0

Router(config-if)#no shutdown

Router(config-if)#interface s0/0

Router(config-if)#ip address 210.28.21.2255.255.255.0

Router(config-if)#no shutdown

Router(config-if)#exit

Router(config)#ip route 192.168.21.0255.255.255.0 210.28.21.1 //配置静态路由器去内网

Router(config)#interface fa0/0

Router(config-if)#ip address 172.16.21.254255.255.255.0

Router(config-if)#ip nat inside

Router(config-if)#no shutdown

Router(config-if)#exit

Router(config)#interface s0/0

Router(config-if)#ip address 210.28.21.2255.255.255.0

Router(config-if)#ip nat outside

Router(config-if)#no shutdown

Router(config-if)#exit

Router(config)#ip nat inside source static172.16.21.11 210.28.21.2

//将服务器的地址172.16.21.11使用静态NAT技术转换成外部IP地址210.28.21.2

Router(config)#ip route 0.0.0.0 0.0.0.0210.28.21.1

Router(config)#access-list 1 permit172.16.21.0 0.0.0.255 //创建访问列表

Router(config)#ip nat pool LAA 210.28.21.2210.28.21.10 netmask 255.255.255.0

Router(config)#ip nat inside source list 1pool LAA

//内部访问地址列表与外部地址池映射（LAA为地址池）

Router(config)#

在ISP路由上进行验证有无成功

结论：最后，所有PC机、服务器可以相互ping通。