如图
1.先进行规划IP
2.再根据要求配置设备IP及网关
3.对AR2:
[AR2]interface GigabitEthernet 0/0/0
[AR2-GigabitEthernet0/0/0]ip address 12.1.1.2 255.255.255.0
[AR2]interface GigabitEthernet 0/0/1
[AR2-GigabitEthernet0/0/1]ip address 1.1.1.1 255.255.255.0
对AR1:
[AR1]interface GigabitEthernet 0/0/0
[AR1-GigabitEthernet0/0/0]ip address 192.168.1.1 255.255.255.0
[AR1]interface GigabitEthernet 0/0/1
[AR1-GigabitEthernet0/0/1]ip address 12.1.1.1 255.255.255.0
PC1
PC2
HTTP1
HTTP2
DNS
3.由于除了IP地址外不能在AR2在做任何配置,所以我们可以通过NAT的一对多就可以使PC1-PC2可以ping通客户平板和DNS服务器
(1)首先我们先在AR1上配置一条到达AR2的缺省路由(用于获得AR2的IP地址)
[AR1]ip route-static 0.0.0.0 0.0.0.0 12.1.1.2
(2)接着在AR1上进行NAT的一对多配置:
[AR1]acl 2000
[AR1-acl-basic-2000]rule permit source 1.1.1.0 0.0.0.255
[AR1]interface GigabitEthernet 0/0/1
[AR1-GigabitEthernet0/0/1]nat outbound 2000
(3)测试PC1和PC2是否可以Ping通客户平板和DNS服务器
5.在http1和http2和DNS上进行设置