华为配置nat

实验拓扑

1、配置接口地址

[R1]int GigabitEthernet 0/0/0
[R1-GigabitEthernet0/0/0]ip address 192.168.1.254 24
[R1]int GigabitEthernet 0/0/1
[R1-GigabitEthernet0/0/1]ip address 12.1.1.1 24

[R2]int GigabitEthernet 0/0/0
[R2-GigabitEthernet0/0/0]ip address 12.1.1.2 24
[R2]int GigabitEthernet 0/0/1
[R2-GigabitEthernet0/0/1]ip address 23.1.1.1 24

[R3]int GigabitEthernet 0/0/0
[R3-GigabitEthernet0/0/0]ip address 23.1.1.2 24

2、R2和R3通过ospf宣告路由

[R2]ospf 1
[R2-ospf-1]area 0
[R2-ospf-1-area-0.0.0.0]network 12.1.1.0 0.0.0.255
[R2-ospf-1-area-0.0.0.0]network 23.1.1.0 0.0.0.255

[R3]ospf 1
[R3-ospf-1]area 0
[R3-ospf-1-area-0.0.0.0]network 23.1.1.0 0.0.0.255

3、R1通过默认路由指向外网

[R1]ip route-static 0.0.0.0 0 12.1.1.2

4、R1上配置nat，作用在出口上，匹配源的

[R1]nat address-group 1 12.1.1.3 12.1.1.6
[R1]acl 2000
[R1-acl-basic-2000]rule permit source 192.168.1.0 0.0.0.255 
[R1-acl-basic-2000]q
[R1]interface GigabitEthernet 0/0/1
[R1-GigabitEthernet0/0/1]nat outbound 2000 address-group 1 no-pat

实验总结

不要忘记在R1上配置出去的静态默认路由
R1上的出口地址转换，不要转换成和对端冲突的地址，第一次地址池范围包括了R2的接口地址，就转发不出去了
顺便整理下，其余几种nat

1、静态nat

[R1]int GigabitEthernet 0/0/1
[R1-GigabitEthernet0/0/1]ip address 12.1.1.1 24
[R1-GigabitEthernet0/0/1] nat static enable
[R1-GigabitEthernet0/0/1]nat static global 12.1.1.3 inside 192.168.1.2
[R1-GigabitEthernet0/0/1]nat static global 12.1.1.4 inside 192.168.1.4
[R1-GigabitEthernet0/0/1]nat static global 12.1.1.5 inside 192.168.1.5

2、NAPT

[R1]nat address-group 1 12.1.1.3 12.1.1.5
[R1]acl 2000
[R1-acl-basic-2000]rule permit source 192.168.1.0 0.0.0.255 
[R1-acl-basic-2000]q
[R1]interface GigabitEthernet 0/0/1
[R1-GigabitEthernet0/0/1]nat outbound 2000 address-group 1 

3、Easy Ip

直接将源的ip转成路由器的接口地址，不用再写地址池了

[R1]acl 2000
[R1-acl-basic-2000]rule permit source 192.168.1.0 0.0.0.255 
[R1-acl-basic-2000]q
[R1]interface GigabitEthernet 0/0/1
[R1-GigabitEthernet0/0/1]nat outbound 2000 

４、nat server

[R1]int GigabitEthernet 0/0/1
[R1-GigabitEthernet0/0/1]ip address 12.1.1.1 24
[R1-GigabitEthernet0/0/1] nat sever protocol tcp global 12.1.1.3 80 inside 192.168.1.1 80