eNSP动态NAT实验记录

最新推荐文章于 2024-04-10 08:00:00 发布

尹汇川

最新推荐文章于 2024-04-10 08:00:00 发布

阅读量1.9k

点赞数

分类专栏：华为网络杂谈

本文链接：https://blog.csdn.net/weixin_46575696/article/details/105356621

版权

华为网络杂谈专栏收录该内容

45 篇文章 1 订阅

订阅专栏

将内部网络10.1.1.0/24转换为公网地址200.1.1.1～200.1.1.10/28上网（访问Server3），并抓包分析

验证动态NAT是单向转换

搭建实验环境
在这里插入图片描述

实现此案例需要按照如下步骤进行。

acl 2000
  rule 5 permit source 10.1.1.0 0.0.0.255
nat address-group 1 200.1.1.1 200.1.1.10
int g0/0/2
  nat outbound 2000 address-group 1 no-pat
[Huawei]dis nat outbound
 NAT Outbound Information:
 --------------------------------------------------------------------------
 Interface                     Acl     Address-group/IP/Interface      Type
 --------------------------------------------------------------------------
 GigabitEthernet0/0/2         2000                              1    no-pat
 --------------------------------------------------------------------------
  Total : 1

    
    
    
    1
2
3
4
5
6
7
8
9
10
11
12
13

PC1 ping Server3测试，内网能够访问外网，查看NAT转换表

[Huawei]dis nat session all
  NAT Session Table Information:
     Protocol          : ICMP(1)
     SrcAddr   Vpn     : 10.1.1.1                                       
     DestAddr  Vpn     : 200.1.1.13                                    
     Type Code IcmpId  : 0   8   43982
     NAT-Info
       New SrcAddr     : 200.1.1.1     
       New DestAddr    : ----
       New IcmpId      : ----
  Total : 1

    
    
    
    1
2
3
4
5
6
7
8
9
10
11

在路由器G0/0/2口抓包，源地址已做转换，如所示

在这里插入图片描述
Server3 ping PC1不通，说明动态NAT是单向的

                                </div><div data-report-view="{&quot;mod&quot;:&quot;1585297308_001&quot;,&quot;dest&quot;:&quot;https://blog.csdn.net/xie_qi_chao/article/details/105201716&quot;,&quot;extend1&quot;:&quot;pc&quot;}"><div></div></div>
            <link href="https://csdnimg.cn/release/phoenix/mdeditor/markdown_views-60ecaf1f42.css" rel="stylesheet">
                                            <div class="more-toolbox">
            <div class="left-toolbox">
                <ul class="toolbox-list">
                    
                    <li class="tool-item tool-active is-like "><a href="javascript:;"><svg class="icon" aria-hidden="true">
                        <use xlink:href="#csdnc-thumbsup"></use>
                    </svg><span class="name">点赞</span>
                    <span class="count"></span>
                    </a></li>
                    <li class="tool-item tool-active is-collection "><a href="javascript:;" data-report-click="{&quot;mod&quot;:&quot;popu_824&quot;}"><svg class="icon" aria-hidden="true">
                        <use xlink:href="#icon-csdnc-Collection-G"></use>
                    </svg><span class="name">收藏</span></a></li>
                    <li class="tool-item tool-active is-share"><a href="javascript:;" data-report-click="{&quot;mod&quot;:&quot;1582594662_002&quot;}"><svg class="icon" aria-hidden="true">
                        <use xlink:href="#icon-csdnc-fenxiang"></use>
                    </svg>分享</a></li>
                    <!--打赏开始-->
                                            <!--打赏结束-->
                                            <li class="tool-item tool-more">
                        <a>
                        <svg t="1575545411852" class="icon" viewBox="0 0 1024 1024" version="1.1" xmlns="http://www.w3.org/2000/svg" p-id="5717" xmlns:xlink="http://www.w3.org/1999/xlink" width="200" height="200"><defs><style type="text/css"></style></defs><path d="M179.176 499.222m-113.245 0a113.245 113.245 0 1 0 226.49 0 113.245 113.245 0 1 0-226.49 0Z" p-id="5718"></path><path d="M509.684 499.222m-113.245 0a113.245 113.245 0 1 0 226.49 0 113.245 113.245 0 1 0-226.49 0Z" p-id="5719"></path><path d="M846.175 499.222m-113.245 0a113.245 113.245 0 1 0 226.49 0 113.245 113.245 0 1 0-226.49 0Z" p-id="5720"></path></svg>
                        </a>
                        <ul class="more-box">
                            <li class="item"><a class="article-report">文章举报</a></li>
                        </ul>
                    </li>
                                        </ul>
            </div>
                        </div>
        <div class="person-messagebox">
            <div class="left-message"><a href="https://blog.csdn.net/xie_qi_chao">
                <img src="https://profile.csdnimg.cn/B/F/6/3_xie_qi_chao" class="avatar_pic" username="xie_qi_chao">
                                        <img src="https://g.csdnimg.cn/static/user-reg-year/1x/2.png" class="user-years">
                                </a></div>
            <div class="middle-message">
                                    <div class="title"><span class="tit"><a href="https://blog.csdn.net/xie_qi_chao" data-report-click="{&quot;mod&quot;:&quot;popu_379&quot;}" target="_blank">解启超</a></span>
                                        </div>
                <div class="text"><span>发布了405 篇原创文章</span> · <span>获赞 58</span> · <span>访问量 4万+</span></div>
            </div>
                            <div class="right-message">
                                        <a href="https://im.csdn.net/im/main.html?userName=xie_qi_chao" target="_blank" class="btn btn-sm btn-red-hollow bt-button personal-letter">私信
                    </a>
                                                        <a class="btn btn-sm attented bt-button personal-watch" data-report-click="{&quot;mod&quot;:&quot;popu_379&quot;}">已关注</a>
                                </div>
                        </div>
                </div>
</article>