业务场景描述:
A公司需通过测试PC访问B公司PC(也可理解成服务器或其他系统)。为规范业务访问,B公司不会把10.0.1.X地址直接分给A公司,所以需要在B公司的AR3上做NAT转换(此实验模拟的是动态NAT)
测试PC:100.100.100.2 255.255.255.0 100.100.100.254
PC4:10.0.1.10 255.255.255.0 10.0.1.254
AR2:
#
interface GigabitEthernet0/0/0
ip address 100.100.100.254 255.255.255.0
#
interface GigabitEthernet0/0/1
ip address 10.0.2.100 255.255.255.0
#
ip route-static 10.0.1.0 255.255.255.0 10.0.2.99
AR3:
#
interface GigabitEthernet0/0/0
ip address 10.0.2.99 255.255.255.0
#
interface GigabitEthernet0/0/1
ip address 10.0.1.254 255.255.255.0
#
ip route-static 0.0.0.0 0.0.0.0 10.0.2.100
#
acl number 2000
rule 10 permit source 100.100.100.0 0.0.0.255
#
nat address-group 1 10.0.1.12 10.0.1.13
#
interface GigabitEthernet0/0/1
nat outbound 2000 address-group 1
配置完成,测试结果: