ÖÐÎÄ
½»Á÷»ú
Ô°ÇøÍø½»Á÷»ú
Êý¾ÝÖÐÐÄÓëÔÆÅÌËã½»Á÷»ú
ÐÐÒµ¾«Ñ¡½»Á÷ϵÁÐ
¹¤Òµ½»Á÷»ú
Åä¼þ
ËùÓÐÊÖÒÕ½â¾ö¼Æ»®
·ÓÉÆ÷
»ã¾Û·ÓÉÆ÷
ÐÐÒµ¾«Ñ¡Â·ÓÉÆ÷ϵÁÐ
ËùÓÐÊÖÒÕ½â¾ö¼Æ»®
ÎÞÏß
·Å×°ÐÍÎÞÏß½ÓÈëµã
Ç½ÃæÐÍÎÞÏß½ÓÈëµã
ÖÇ·ÖÎÞÏß½ÓÈëµã
ÊÒÍâÎÞÏß½ÓÈëµã
³¡¾°»¯ÎÞÏß
ÎÞÏß¿ØÖÆÆ÷
ÐÐÒµ¾«Ñ¡ÎÞÏßϵÁÐ
ÎÞÏß¹ÜÀíÓëÓ¦ÓÃ
ÔÆ×ÀÃæ
ÔÆÖÕ¶ËϵÁÐ
ÔÆÖ÷»úϵÁÐ
ÔÆ×ÀÃæÈí¼þϵÁÐ
Åä¼þϵÁÐ
·þÎñ²úÆ·
Çå¾²
´óÊý¾ÝÇ徲ƽ̨
ÏÂÒ»´ú·À»ðǽ
Çå¾²Íø¹Ø
¼ì²â¹ÜÀíÇå¾²
ËùÓÐÊÖÒÕ½â¾ö¼Æ»®
Èí¼þ
Éí·Ý¹ÜÀí
·þÎñ²úÆ·
»ù´¡Î¬»¤·þÎñ
ÔËά¹ÜÀí·þÎñ
Çå¾²·þÎñ
±¸¼þÓëÀ©ÈÝ·þÎñ
ÅàѵÓëÈÏÖ¤·þÎñ
¹¦Ð§ÏÈÈÝ£º
NATµØÖ·³Ø×ª»» ͨ¹ý ¹«ÍøµØÖ·³ØµÄIPµØÖ·+¶Ë¿ÚºÅÀ´¶ÔÓ¦ºÍÇø±ð¸÷¸öÊý¾ÝÁ÷¾ÙÐÐÍøÂçµØÖ·×ª»»£¬ÒÔµÖ´ï¶àÄÚ²¿Ö÷»úͨ¹ýÉÙÁ¿¹«ÍøIPµØÖ·À´»á¼ûÍâ²¿ÍøÂçµÄÄ¿µÄ¡£
Ó¦Óó¡¾°£º
Æóҵͨ¹ý×âÓÃÔËÓªÉ̵ÄרÏßÉÏÍø£¬µ±Óжà¸ö¹«ÍøIPµØÖ·µÄʱ¼ä£¬Í¨¹ý°Ñ¶à¸ö¹«ÍøIPµØÖ··Åµ½¹«ÍøµØÖ·³Ø£¬°ÑÄÚÍøÓû§µÄµØÖ·×ª»»³É¹«ÍøµØÖ·³ØÄÚÀïµÄIPµØÖ·£¬Ê¹ÄÚÍøÓû§Äܹ»»á¼ûÍâÍø¡£
Ò»¡¢×éÍøÐèÇó
ÄÚÍøµØÖ·Í¨¹ýNAT£¬×ª»»³É¹«ÍøµØÖ·³ØµÄµØÖ·£¬Ê¹ÄÚÍøÄܹ»Õý³£»á¼ûÍâÍø¡£
¶þ¡¢×éÍøÍØÆË
Èý¡¢ÉèÖÃÒªµã
1¡¢»ù±¾ipµØÖ·ÉèÖÃ
2¡¢»ù±¾µÄip·ÓÉÉèÖÃ
3¡¢½ç˵natµÄÄÚÍø¿ÚºÍÍâÍø¿Ú
4¡¢ÔÚR1ÉÏÉèÖÃACL£¬°ÑÄÚÍøÐèÒª¾ÙÐÐNATת»»µÄÁ÷Á¿Æ¥Åä³öÀ´
5¡¢ÉèÖù«ÍøµØÖ·³Ø
6¡¢ÉèÖÃnatת»»Õ½ÂÔ
ËÄ¡¢ÉèÖð취
1¡¢»ù±¾ipµØÖ·ÉèÖÃ
Ruijie(config)#hostname R1
R1(config)#interface gigabitEthernet 0/0
R1(config-GigabitEthernet 0/0)#ip address 192.168.1.1 255.255.255.0
R1(config-GigabitEthernet 0/0)#exit
R1(config)#interface gigabitEthernet 0/1
R1(config-GigabitEthernet 0/1)#ip address 192.168.2.1 255.255.255.0
R1(config-GigabitEthernet 0/1)#exit
Ruijie(config)#hostname R2
R2(config)#interface gigabitEthernet 0/0
R2(config-GigabitEthernet 0/0)#ip address 192.168.1.2 255.255.255.0
R2(config-GigabitEthernet 0/0)#exit
R2(config)#interface gigabitEthernet 0/1
R2(config-GigabitEthernet 0/1)#ip address 172.16.1.1 255.255.255.0
R2(config-GigabitEthernet 0/1)#exit
R2(config)#interface gigabitEthernet 0/2
R2(config-GigabitEthernet 0/2)#ip address 172.16.2.1 255.255.255.0
R2(config-GigabitEthernet 0/2)#exit
Ruijie(config)#hostname R3
R3(config)#interface fastEthernet 0/0
R3(config-if-FastEthernet 0/0)#ip address 192.168.2.2 255.255.255.0
R3(config-if-FastEthernet 0/0)#exit
2¡¢»ù±¾µÄip·ÓÉÉèÖÃ
R1(config)#ip route 172.16.0.0 255.255.0.0 192.168.1.2
R1(config)#ip route 100.1.1.0 255.255.255.0 192.168.2.2
R2(config)#ip route 100.1.1.0 255.255.255.0 192.168.1.1
3¡¢½ç˵natµÄÄÚÍø¿ÚºÍÍâÍø¿Ú
R1(config)#interface gigabitEthernet 0/1
R1(config-GigabitEthernet 0/1)#ip nat outside //ÉèÖÃnatµÄÍâÍø¿Ú
R1(config-GigabitEthernet 0/1)#exit
R1(config)#int gigabitEthernet 0/0
R1(config-GigabitEthernet 0/0)#ip nat inside //ÉèÖÃnatµÄÄÚÍø¿Ú
R1(config-GigabitEthernet 0/0)#exit
4¡¢ÔÚR1ÉÏÉèÖÃACL£¬°ÑÄÚÍøÐèÒª¾ÙÐÐNATת»»µÄÁ÷Á¿Æ¥Åä³öÀ´
R1(config)#ip access-list standard 10
R1(config-std-nacl)#10 permit 172.16.1.0 0.0.0.255
R1(config-std-nacl)#20 permit 172.16.2.0 0.0.0.255
R1(config-std-nacl)#exit
5¡¢ÉèÖù«ÍøµØÖ·³Ø
×¢ÖØ£º
1£©¹«ÍøµØÖ·³ØµÄµØÖ·£¬·×Æç¶¨Òª¸úÍâÍø¿ÚµÄµØÖ·ÔÚͳһ¸öÍø¶Î£¬Ö»ÒªÊÇÍâÍø·ÖÅɵĿÉÓÃipµØÖ·¾Í¿ÉÒÔ¡£
2£©¹«ÍøµØÖ·µÄÆðʼipµØÖ·ºÍ¿¢ÊÂipµØÖ·¿ÉÒÔ²»Ò»Á¬
R1(config)#ip nat pool ruijie netmask 255.255.255.0 //ÉèÖÃÒ»¸öÃû×ÖΪruijieµÄ¹«ÍøµØÖ·³Ø
R1(config-ipnat-pool)#address 192.168.2.10 192.168.2.11 //¹«ÍøµØÖ·µÄÆðʼipµØÖ·£¬¿¢ÊÂipµØÖ·
R1(config-ipnat-pool)#address 192.168.2.15 192.168.2.15 //ÈôÓжà¸ö¹«ÍøµØÖ·£¬¿ÉÊDz»Ò»Á¬£¬¿ÉÒÔÉèÖöà¸ö¹«ÍøµØÖ·¶Î
R1(config-ipnat-pool)#exit
6¡¢ÉèÖÃnatת»»Õ½ÂÔ
R1(config)#ip nat inside source list 10 pool ruijie overload //½«acl 10Æ¥ÅäµÄÁ÷Á¿£¬Ö´ÐÐnatת»»£¬×ª»»³ÉµØÖ·³ØruijieÄÚÀïµÄµØÖ·
×¢ÖØ£º
overload²ÎÊýÊÇÖ´ÐÐnatÖØÔØµÄ¼ÄÒ壬Èô²»¼ÓoverloadÊÇÖ´Ðж¯Ì¬µÄipÒ»¶ÔÒ»Ó³É䣬²»»áÖ´Ðж˿Úת»»£¬²»¿É½â¾ö¹«ÍøµØÖ·²»·óµÄÎÊÌâ¡£ÈôÊÇÔÚÍøÂç³ö¿ÚÖ´ÐÐNAT£¬ÊÇΪÏàʶ¾ö¹«ÍøµØÖ·²»·óµÄÎÊÌ⣬±ØÐèÒª¼Óoverload²ÎÊý¡£
Îå¡¢ÉèÖÃÑéÖ¤
²âÊÔÄÚÍøÄÜ·ñÕý³£»á¼ûÍâÍø£¬ÈôÄÚÍøPC¿ÉÒÔÕý³£»á¼ûÍâÍø£¬ÔòNATÉèÖÃ׼ȷ¡£ÔÚ³ö¿Ú·ÓÉÆ÷ÉÏÉó²éNATת»»±íÏîÈçÏ£º