华为PAT
https://upload-images.jianshu.io/upload_images/24325874-0ca592e801f1912f.png?imageMogr2/auto-orient/strip%7CimageView2/2/w/1240配置对应的地址。PC1 192.168.10.101PC2 192.168.10.102 R1 192.168.10.25412.1.1.1ISP12.1.1.2 100.1.1.254Server 100.1.1.1
int g0/0/0ip add 12.1.1.2 24int g0/0/1ip add 100.1.1.254 24
https://upload-images.jianshu.io/upload_images/24325874-8a4858058a0b2df6.png?imageMogr2/auto-orient/strip%7CimageView2/2/w/1240
int g0/0/1ip add 192.168.10.254 24int g0/0/0ip add 12.1.1.1 24
https://upload-images.jianshu.io/upload_images/24325874-54202c6181bab290.png?imageMogr2/auto-orient/strip%7CimageView2/2/w/1240
写一条缺省路由去往ISP
https://upload-images.jianshu.io/upload_images/24325874-2cd57f3a43cb129c.png?imageMogr2/auto-orient/strip%7CimageView2/2/w/1240
创建一个地址池,命名为7
https://upload-images.jianshu.io/upload_images/24325874-ac7e6e02b3cab40c.png?imageMogr2/auto-orient/strip%7CimageView2/2/w/1240
acl number 2000 创建标准ACLrule 10 permit source 192.168.10.0 0.0.0.255使用规则10抓取要转换的网段q
https://upload-images.jianshu.io/upload_images/24325874-aa5d8f103289b53a.png?imageMogr2/auto-orient/strip%7CimageView2/2/w/1240
int g 0/0/0nat outbound 2000 address-group 7
https://upload-images.jianshu.io/upload_images/24325874-20470d81c0c27bc5.png?imageMogr2/auto-orient/strip%7CimageView2/2/w/1240
内网IP满足 ACL2000后,就会通过7号地址池的公有地址做源地址转换现在类型已经变成了patdisp nat outbound 查看出口类型补充点:Easy IP配置
https://upload-images.jianshu.io/upload_images/24325874-7bc0279b5e8c882e.png?imageMogr2/auto-orient/strip%7CimageView2/2/w/1240
直接写ACL匹配内网主机的IP地址,调用就可以,从内到外的流量的能够被ACL2000匹配就做转换,拿接口的IP来做一个转换
https://upload-images.jianshu.io/upload_images/24325874-c6e482969a0bdb69.png?imageMogr2/auto-orient/strip%7CimageView2/2/w/1240
上图NAT类型为Easy IP
6666666
页:
[1]