¹¦Ð§ÏÈÈÝ£º

°ÑÄÚ²¿Ö÷»úµÄipµØÖ·Ò»¶ÔÒ»µÄÓ³Éä³É¹«ÍøipµØÖ·£¬»òÕß ÄÚ²¿Ö÷»úµÄipµØÖ·+¶Ë¿Ú Ò»¶ÔÒ»µÄÓ³Éä³É ¹«ÍøipµØÖ·+¶Ë¿Ú¡£

Ó¦Óó¡¾°£º

Æóҵͨ¹ý×âÓÃÔËÓªÉ̵ÄרÏßÉÏÍø£¬ÆóÒµÄÚ²¿¼ÜÉè·þÎñÆ÷¸øÍâÍø»á¼û£¬ÐèÒª°ÑÄÚ²¿·þÎñÆ÷µÄ˽ÍøIPµØÖ·£¬Ó³Éä³É¹«ÍøµØÖ·£¬²Å»ª¸øÍâÍøµÄÓû§Ìṩ·þÎñ¡£

Ò»¡¢×éÍøÐèÇó

ÄÚÍø·þÎñÆ÷µÄµØַͨ¹ý¾²Ì¬NAT£¬×ª»»³ÉÍâÍøµÄµØÖ·£¬Ê¹ÍâÍøÄܹ»»á¼ûÄÚÍøµÄ·þÎñÆ÷¡£          

¶þ¡¢×éÍøÍØÆË

Èý¡¢ÉèÖÃÒªµã

1¡¢»ù±¾ipµØÖ·ÉèÖÃ

2¡¢»ù±¾µÄip·ÓÉÉèÖÃ

3¡¢½ç˵natµÄÄÚÍø¿ÚºÍÍâÍø¿Ú

4¡¢ÉèÖÃnatת»»Õ½ÂÔ

ËÄ¡¢ÉèÖð취

1¡¢»ù±¾ipµØÖ·ÉèÖÃ

Ruijie(config)#hostname R1

R1(config)#interface gigabitEthernet 0/0

R1(config-GigabitEthernet 0/0)#ip address 192.168.1.1 255.255.255.0

R1(config-GigabitEthernet 0/0)#exit

R1(config)#interface gigabitEthernet 0/1

R1(config-GigabitEthernet 0/2)#ip address 192.168.2.1 255.255.255.0

R1(config-GigabitEthernet 0/2)#exit

Ruijie(config)#hostname R2

R2(config)#interface gigabitEthernet 0/0

R2(config-GigabitEthernet 0/0)#ip address 192.168.1.2 255.255.255.0

R2(config-GigabitEthernet 0/0)#exit

R2(config)#interface gigabitEthernet 0/1

R2(config-GigabitEthernet 0/1)#ip address 172.16.1.1 255.255.255.0

R2(config-GigabitEthernet 0/1)#exit

R2(config)#interface gigabitEthernet 0/2

R2(config-GigabitEthernet 0/2)#ip address 172.16.2.1 255.255.255.0

R2(config-GigabitEthernet 0/2)#exit

Ruijie(config)#hostname R3

R3(config)#interface fastEthernet 0/0

R3(config-if-FastEthernet 0/0)#ip address 192.168.2.2 255.255.255.0

R3(config-if-FastEthernet 0/0)#exit

2¡¢»ù±¾µÄip·ÓÉÉèÖÃ

R1(config)#ip route 172.16.0.0 255.255.0.0 192.168.1.2

R1(config)#ip route 100.1.1.0 255.255.255.0 192.168.2.2

R2(config)#ip route 100.1.1.0 255.255.255.0 192.168.1.1

R2(config)#ip route 192.168.0.0 255.255.0.0 192.168.1.1

3¡¢½ç˵natµÄÄÚÍø¿ÚºÍÍâÍø¿Ú

R1(config)#interface gigabitEthernet 0/1

R1(config-GigabitEthernet 0/1)#ip nat outside      //ÉèÖÃnatµÄÍâÍø¿Ú

R1(config-GigabitEthernet 0/1)#exit

R1(config)#int gigabitEthernet 0/0

R1(config-GigabitEthernet 0/0)#ip nat inside     //ÉèÖÃnatµÄÄÚÍø¿Ú

R1(config-GigabitEthernet 0/0)#exit

4¡¢ÉèÖþ²Ì¬nat

×¢ÖØ£º

1£©¾²Ì¬natת»»£¬¿ÉÒÔ¾ÙÐÐipµØÖ·Ò»¶ÔÒ»µÄת»»£¬Ò²¿ÉÒÔ»ùÓÚTCP¡¢UDPЭÒé¾ÙÐж˿Úת»»¡£

2£©permit-inside¹¦Ð§£ºµ±ÓÐÄÚÍø·þÎñÆ÷¾²Ì¬Ó³Éä³É¹«ÍøµØַʱ£¬ÄÚÍøPCÈôÐèҪͨ¹ý¸Ã¹«ÍøµØÖ·»á¼û·þÎñÆ÷£¬¾Í±ØÐèÉèÖÃpermit-inside²ÎÊý£¬ÔÚÉèÖþ²Ì¬natʱ£¬½¨Ò鶼ÉèÖÃpermit-inside²ÎÊý¡£

ÈçÏ»®·ÖΪ»ùÓÚipµØÖ·µÄÒ»¶ÔÒ»Ó³Éä¼°»ùÓÚTCP¡¢UDPЭÒéµÄ¶Ë¿ÚÓ³ÉäµÄÉèÖÃʾÀý£º

1£©»ùÓÚipµØÖ·µÄÒ»¶ÔÒ»Ó³Éä

R1(config)#ip nat inside source static 172.16.1.100 192.168.2.168 permit-inside      //°ÑÄÚÍø172.16.1.100 Ó³Éä³É¹«ÍøµÄ192.168.2.88

2£©»ùÓÚTCP¡¢UDPЭÒéµÄ¶Ë¿ÚÓ³Éä

R1(config)#ip nat inside source static tcp 172.16.1.100 23 192.168.2.168 23  permit-inside      //°ÑÄÚÍø172.16.1.100 tcp 23¶Ë¿Ú Ó³Éä³É¹«ÍøµÄ192.168.2.88 µÄ23¶Ë¿Ú

Îå¡¢ÉèÖÃÑéÖ¤

²âÊÔÍâÍøÄÜ·ñÕý³£»á¼ûÄÚÍø·þÎñÆ÷£¬ÈôÍâÍø¿ÉÒÔÕý³£»á¼ûÄÚÍøµÄ·þÎñÆ÷£¬Ôò¾²Ì¬NATÉèÖÃ׼ȷ¡£ÔÚ³ö¿Ú·ÓÉÆ÷ÉÏÉó²éNATת»»±íÏîÈçÏ£º