Nat实验

Nat实验

1. 实验拓补

2.实验要求

（1按照图示配置IP地址，公网地址100.1.1.1/24

（2私网A通过NAPT，使R1接入到互联网，私网B通过EASY IP，使R3接入到互联网

（3私网A配置NAT SERVER把Telnet的Telnet服务发布到公网，使PC2可以访问

3.实验思路

1. 在Telnet服务器上配置telnet服务
2. 在R1上配置ACL，抓取私网A的流量并配置NAT协议控制

4.实验步骤

[telnet]int g0/0/0

[telnet-GigabitEthernet0/0/0]ip add 192.168.1.2 24

[telnet]ip route-static 0.0.0.0 0 192.168.1.254

[telnet-aaa]local-user hhh privilege level 15 password cipher 666

[telnet-aaa]local-user hhh service-type telnet

[telnet]user-interface vty 0 4

[telnet-ui-vty0-4]authentication-modea aaa

[R1]int g0/0/0

[R1-GigabitEthernet0/0/0]ip add 192.168.1.254 24

[R1-GigabitEthernet0/0/0]int g0/0/1

[R1-GigabitEthernet0/0/1]ip add 100.1.1.1 24

[R1]ip route-static 0.0.0.0 0 100.1.1.2

[R1-acl-basic-2000]rule permit source 192.168.1.0 0.0.0.255

[R1]nat address-group 1 100.1.1.3 100.1.1.254

[R1-GigabitEthernet0/0/1]nat outbound 2000 address-group 1

[R1-GigabitEthernet0/0/1]nat server protocol tcp global current-interface 23 ins

ide 192.168.1.2 23

[R2]int g0/0/0

[R2-GigabitEthernet0/0/0]ip add 100.2.2.2 24

[R2]int g0/0/1

[R2-GigabitEthernet0/0/1]ip add 100.2.2.2 24

[R2]int g0/0/1

[R2-GigabitEthernet0/0/1]ip add 100.2.2.2 24

[R3]int g0/0/0

[R3-GigabitEthernet0/0/0]ip add 100.2.2.3 24

[R3-GigabitEthernet0/0/0]int g0/0/1

[R3-GigabitEthernet0/0/1]ip add 192.168.1.3 24

[R3]ip route-static 0.0.0.0 0 100.2.2.2

[R3-acl-basic-2000]rule permit source 192.168.1.0 0.0.0.2

[PC2]int g0/0/0

[PC2-GigabitEthernet0/0/0]ip add 192.168.1.1 24

[PC2]ip route-static 0.0.0.0 0 192.168.1.3

5.测试