enable
conf t
int f0/0 //外网
des WAN
ip add 123.1.1.1 255.255.255.x //假设你的外网是这个地址
ip nat out
no sh
int f0/1
des Trust
ip add 10.10.10.254 255.255.255.0 //网关就给254吧
ip nat insi
no sh
service dhcp //开启dhcp服务(1841默认开启)
ip dhcp excl 10.10.10.254 //确保254这地址不被分出去
ip dhcp pool NAME //NAME你自己改吧
network 10.10.10.0 255.255.255.0 //ip的范围
dns-server 211.50.61.36 //dns
default-rou 10.10.10.254 //默认网关
access-list 1 per 10.10.10.0 0.0.0.255 //定义要被NAT的地址
ip nat in sou list 1 int f0/0 over //地址转到哪个接口上的IP,overload为复用
ip domain-look //开启域名解析功能
ip name-server 211.50.61.36 //定义公网dns
ip route 0.0.0.0 0.0.0.0 nexthop或者f0/0 //定义缺省路由,推荐用下一跳地址