实验说明:
各接口IP地址:
r1:
s1/0  192.168.1.1
f0/0  10.0.0.1
r2:
s1/0 10.0.0.2
lookback0 2.2.2.2
PC机 ip 10.0.0.2  网管 10.0.0.1
 
前提条件 s1/0能ping通 2.2.2.2
配置NAT 使 10.0.0.2 能ping 2.2.2.2
 
r1配置:
interface Serial1/0
 ip nat outside
interface FastEthernet0/0
 ip nat inside
ip nat inside source static 10.0.0.2 192.168.1.10
验证:
在r1 特权模式下打开 debug ip nat,然后在pc机上ping 2.2.2.2,r1,会有提示:
*Feb 27 20:52:30.779: NAT*: s=10.0.0.2->192.168.1.10, d=2.2.2.2 [20]
*Feb 27 20:52:30.875: NAT*: s=2.2.2.2, d=192.168.1.10->10.0.0.2 [20]
*Feb 27 20:52:30.935: NAT*: s=10.0.0.2->192.168.1.10, d=2.2.2.2 [21]
*Feb 27 20:52:30.975: NAT*: s=2.2.2.2, d=192.168.1.10->10.0.0.2 [21]
*Feb 27 20:52:31.055: NAT*: s=10.0.0.2->192.168.1.10, d=2.2.2.2 [22]
*Feb 27 20:52:31.091: NAT*: s=2.2.2.2, d=192.168.1.10->10.0.0.2 [22]
*Feb 27 20:52:31.123: NAT*: s=10.0.0.2->192.168.1.10, d=2.2.2.2 [23]
*Feb 27 20:52:31.175: NAT*: s=2.2.2.2, d=192.168.1.10->10.0.0.2 [23]
*Feb 27 20:52:31.219: NAT*: s=10.0.0.2->192.168.1.10, d=2.2.2.2 [24]
*Feb 27 20:52:31.263: NAT*: s=2.2.2.2, d=192.168.1.10->10.0.0.2 [24]