闫辉 发表于 2020-12-18 16:37:19

华为PAT

https://upload-images.jianshu.io/upload_images/24325874-0ca592e801f1912f.png?imageMogr2/auto-orient/strip%7CimageView2/2/w/1240


配置对应的地址。PC1 192.168.10.101PC2 192.168.10.102   R1   192.168.10.25412.1.1.1ISP12.1.1.2   100.1.1.254Server 100.1.1.1
int g0/0/0ip add 12.1.1.2 24int g0/0/1ip add 100.1.1.254 24
https://upload-images.jianshu.io/upload_images/24325874-8a4858058a0b2df6.png?imageMogr2/auto-orient/strip%7CimageView2/2/w/1240


int g0/0/1ip add 192.168.10.254 24int g0/0/0ip add 12.1.1.1 24
https://upload-images.jianshu.io/upload_images/24325874-54202c6181bab290.png?imageMogr2/auto-orient/strip%7CimageView2/2/w/1240


写一条缺省路由去往ISP
https://upload-images.jianshu.io/upload_images/24325874-2cd57f3a43cb129c.png?imageMogr2/auto-orient/strip%7CimageView2/2/w/1240


创建一个地址池,命名为7
https://upload-images.jianshu.io/upload_images/24325874-ac7e6e02b3cab40c.png?imageMogr2/auto-orient/strip%7CimageView2/2/w/1240


acl number 2000                                        创建标准ACLrule 10 permit source 192.168.10.0 0.0.0.255使用规则10抓取要转换的网段q
https://upload-images.jianshu.io/upload_images/24325874-aa5d8f103289b53a.png?imageMogr2/auto-orient/strip%7CimageView2/2/w/1240


int g 0/0/0nat outbound 2000 address-group 7
https://upload-images.jianshu.io/upload_images/24325874-20470d81c0c27bc5.png?imageMogr2/auto-orient/strip%7CimageView2/2/w/1240


内网IP满足 ACL2000后,就会通过7号地址池的公有地址做源地址转换现在类型已经变成了patdisp nat outbound       查看出口类型补充点:Easy IP配置
https://upload-images.jianshu.io/upload_images/24325874-7bc0279b5e8c882e.png?imageMogr2/auto-orient/strip%7CimageView2/2/w/1240


直接写ACL匹配内网主机的IP地址,调用就可以,从内到外的流量的能够被ACL2000匹配就做转换,拿接口的IP来做一个转换
https://upload-images.jianshu.io/upload_images/24325874-c6e482969a0bdb69.png?imageMogr2/auto-orient/strip%7CimageView2/2/w/1240


上图NAT类型为Easy IP

青花鱼 发表于 2021-4-28 11:42:03

6666666
页: [1]
查看完整版本: 华为PAT