思科N3K交换机配置NAT

需求：监控服务器的IP是10.31.32.177，我需要去监控N3K交换机上的专线可用性，需要配置源地址转换，将监控服务器的地址转换为专线接口的出接口IP地址。

实现方式：

1、一端是VLAN，一端是物理接口的配置

interface Vlan100        # inside接口,监控流量的入接口
  no shutdown
  ip address 10.13.254.53/28    
  ip nat inside 


interface Ethernet1/44      # outside接口，接的是专线
  no switchport
  ip address 10.226.96.6/30    # 专线对端地址是10.226.96.5
  no shutdown
  ip nat outside 

ip access-list JK_L2_ACL       # 使用ACL匹配流量
  permit ip 10.31.32.177/32 10.226.96.5/32     # 10.31.32.177/32是我们监控服务器的地址

ip nat inside source list JK_L2_ACL interface Ethernet 1/44 overload

2、两端都是VLAN接口的配置

interface Vlan100     # 监控流量的入接口
  no shutdown
  ip address 10.13.254.53/28
  ip nat inside 
  hsrp 10 
    preempt 
    priority 105
    ip 10.13.254.55


interface Ethernet1/45    # 专线物理接口
  description jiaoyi-A
  switchport access vlan 2211
  speed 1000

interface Vlan2211        # 专线VLAN接口
  description name jiaoyi-A
  no shutdown
  ip address 221.112.151.241/24     # 专线对端地址是221.112.150.254
  ip nat outside 
 
ip access-list JK_L1BP_ACL    # 匹配监控流量
  30 permit ip 10.31.32.177/32 221.112.151.254/32    # 10.31.32.177/32是监控服务器的地址

ip nat inside source list JK_L1BP_ACL interface vlan 2211 overload