正文

NAT及静态转换，动态转换及PAT

IP云
IP云V管理员/6 阅读
12/02
提示：扫一扫查出行
【扫一扫了解最新限行尾号】
复制提示

NAT及静态转换，动态转换及PAT
  1. 案例1：配置静态NAT
  2. 案例2：配置端口映射
  3. 案例3：配置动态NAT
  4. 案例4：PAT配置
  5. 案例5：办公区Internet的访问

1 案例1：配置静态NAT

1.1 问题

随着接入Internet的计算机数量的不断猛增，IP地址资源也就愈加显得捉襟见肘。事实上，除了中国教育和科研计算机网（CERNET）外，一般用户几乎申请不到整段的C类IP地址。在其他ISP那里，即使是拥有几百台计算机的大型局域网用户，当他们申请IP地址时，所分配的地址也不过只有几个或十几个IP地址。显然，这样少的IP地址根本无法满足网络用户的需求。

  • 在R1上配置静态NAT使192.168.1.1转换为61.159.62.131，192.168.1.2转换为61.159.62.132，实现外部网络访问。

1.2 方案

借助于NAT，私有（保留）地址的"内部"网络通过路由器发送数据包时，私有地址被转换成合法的IP地址，一个局域网只需使用少量IP地址（甚至是1个）即可实现私有地址网络内所有计算机与Internet的通信需求。

这种通过使用少量的公有IP 地址代表较多的私有IP 地址的方式，将有助于减缓可用IP地址空间的枯竭。而且还能够有效地避免来自网络外部的攻击，隐藏并保护网络内部的计算机。

网络拓扑如图－1所示：

图－1

1.3 步骤

实现此案例需要按照如下步骤进行。

步骤一：通用配置

1）配置R1端口IP地址，以及默认路由

  1. tarena - R1 ( config ) # interface f0 / 0
  2. tarena - R1 ( config - if ) #ip address 192.168.1.254 255.255.255.0
  3. tarena - R1 ( config - if ) #no shutdown
  4. tarena - R1 ( config - if ) # interface f0 / 1
  5. tarena - R1 ( config - if ) #ip address 61.159.62.129 255.255.255.248
  6. tarena - R1 ( config - if ) #no shutdown
  7. tarena - R1 ( config - if ) #exit
  8. tarena - R1 ( config ) #ip route 0.0.0.0 0.0.0.0 f0 / 1

2）配置R2端口IP地址

不需要在R2上配置到企业内网的静态路由，因为NAT的存在，企业内部的地址都将被转换、隐藏。

  1. tarena - R2 ( config ) # interface f0 / 0
  2. tarena - R2 ( config - if ) #ip address 61.159.62.130 255.255.255.248
  3. tarena - R2 ( config - if ) #no shutdown
  4. tarena - R2 ( config - if ) # interface f0 / 1
  5. tarena - R2 ( config - if ) #ip address 192.168.2.254 255.255.255.0
  6. tarena - R2 ( config - if ) #no shutdown

步骤二：静态NAT配置

1）在R1上将192.168.1.1映射到61.159.62.131，将192.168.1.2映射到61.159.62.132

静态映射有唯一对应的关系。

通过静态NAT，可以把内网服务器发布到外网。

  1. tarena - R1 ( config ) #ip nat inside source static 192.168.1.1 61.159.62.131
  2. tarena - R1 ( config ) #ip nat inside source static 192.168.1.2 61.159.62.132

2）在R1上配置NAT内、外端口

  1. tarena - R1 ( config ) # interface f0 / 0
  2. tarena - R1 ( config - if ) #ip nat inside
  3. tarena - R1 ( config - if ) # interface f0 / 1
  4. tarena - R1 ( config - if ) #ip nat outside

3）分别在两台PC机上测试到外网主机的通信

PC1测试如下所示：

  1. PC > ipconfig
  2. FastEthernet0 Connection :( default port )
  3. Link - local IPv6 Address .........: FE80 :: 2D0 : FFFF : FE45 : CACC
  4. IP Address ......................: 192.168.1.1
  5. Subnet Mask .....................: 255.255.255.0
  6. Default Gateway .................: 192.168.1.254
  7. PC > ping 192.168.2.1
  8. Pinging 192.168.2.1 with 32 bytes of data :
  9. Reply from 192.168.2.1 : bytes = 32 time = 1ms TTL = 126
  10. Reply from 192.168.2.1 : bytes = 32 time = 0ms TTL = 126
  11. Reply from 192.168.2.1 : bytes = 32 time = 0ms TTL = 126
  12. Reply from 192.168.2.1 : bytes = 32 time = 0ms TTL = 126
  13. Ping statistics for 192.168.2.1 :
  14. Packets : Sent = 4 , Received = 4 , Lost = 0 ( 0 % loss ),
  15. Approximate round trip times in milli - seconds :
  16. Minimum = 0ms , Maximum = 1ms , Average = 0ms
  17. PC >

PC2的测试如下所示：

  1. PC > ipconfig
  2. FastEthernet0 Connection :( default port )
  3. Link - local IPv6 Address .........: FE80 :: 200 : CFF : FEEA : DE30
  4. IP Address ......................: 192.168.1.2
  5. Subnet Mask .....................: 255.255.255.0
  6. Default Gateway .................: 192.168.1.254
  7. PC > ping 192.168.2.1
  8. Pinging 192.168.2.1 with 32 bytes of data :
  9. Request timed out .
  10. Reply from 192.168.2.1 : bytes = 32 time = 0ms TTL = 126
  11. Reply from 192.168.2.1 : bytes = 32 time = 0ms TTL = 126
  12. Reply from 192.168.2.1 : bytes = 32 time = 0ms TTL = 126
  13. Ping statistics for 192.168.2.1 :
  14. Packets : Sent = 4 , Received = 3 , Lost = 1 ( 25 % loss ),
  15. Approximate round trip times in milli - seconds :
  16. Minimum = 0ms , Maximum = 0ms , Average = 0ms
  17. PC >

4）在R1上查看NAT转换表

  1. tarena - R1#show ip nat translations
  2. Pro Inside global Inside local Outside local Outside global
  3. icmp 61.159.62.131 : 10 192.168.1.1 : 10 192.168.2.1 : 10 192.168.2.1 : 10
  4. icmp 61.159.62.131 : 11 192.168.1.1 : 11 192.168.2.1 : 11 192.168.2.1 : 11
  5. icmp 61.159.62.131 : 12 192.168.1.1 : 12 192.168.2.1 : 12 192.168.2.1 : 12
  6. icmp 61.159.62.131 : 9 192.168.1.1 : 9 192.168.2.1 : 9 192.168.2.1 : 9
  7. icmp 61.159.62.132 : 27 192.168.1.2 : 27 192.168.2.1 : 27 192.168.2.1 : 27
  8. icmp 61.159.62.132 : 28 192.168.1.2 : 28 192.168.2.1 : 28 192.168.2.1 : 28
  9. icmp 61.159.62.132 : 29 192.168.1.2 : 29 192.168.2.1 : 29 192.168.2.1 : 29
  10. icmp 61.159.62.132 : 30 192.168.1.2 : 30 192.168.2.1 : 30 192.168.2.1 : 30

2 案例2：配置端口映射

2.1 问题

通过端口映射技术将内部服务器发布向Internet。

2.2 方案

在R1上配置端口映射将192.168.1.3的80端口映射为61.159.62.133的80端口，将web服务器发布到Internet。网络拓扑如图－2所

图－2

2.3 步骤

实现此案例需要按照如下步骤进行。

步骤一：通用配置

1）在案例一基础上取消静态转换条目，在192.168.1.0网络新增一台web服务器IP为192.168.1.3。将192.168.1.3的80端口映射为61.159.62.133的80端口

  1. tarena - R1 ( config ) #no ip nat inside source static 192.168.1.1 61.159.62.131
  2. tarena - R1 ( config ) #no ip nat inside source static 192.168.1.2 61.159.62.132
  3. tarena - R1 ( config ) #ip nat inside source static tcp 192.168.1.3 80 61.159.62.133 80

步骤二：PC3上访问web服务器进行验证

1）外部主机PC4上访问61.159.62.133进行验证，如图-3所示

图-3

3 案例3：配置动态NAT

3.1 问题

  • 在R1通过动态NAT实现企业内网192.168.1.0/24转换为公网地址61.159.62.131-61.159.62.134，访问192.168.2.1

3.2 方案

网络拓扑如图－4所示：

图－4

3.3 步骤

实现此案例需要按照如下步骤进行。

步骤一：动态NAT配置

1）删除案例2中的端口映射

  1. tarena - R1 ( config ) #no ip nat inside source static tcp 192.168.1.3 80 61.159.62.133 80

2）在R1上配置ACL

  1. tarena - R1 ( config ) #access - list 1 permit 192.168.1.0 0.0.0.255

3）在R1上配置可转换的公网IP地址池

地址池是向ISP（Internet服务提供商，如电信、联通）申请得到的，内网主机（上一步ACL中所包含的IP地址）到外网的访问，内网地址将被动态的、随机的转换为这些合法地址。

  1. tarena - R1 ( config ) #ip nat pool natpool 61.159.62.131 61.159.62.134 netmask 255.255.255.248

4）关联ACL和公网的IP地址池

  1. tarena - R1 ( config ) #ip nat inside source list 1 pool natpool

5）在R1上配置NAT内、外端口

  1. tarena - R1 ( config ) # interface f0 / 0
  2. tarena - R1 ( config - if ) #ip nat inside
  3. tarena - R1 ( config - if ) # interface f0 / 1
  4. tarena - R1 ( config - if ) #ip nat outside

6）分别在两台PC机上测试到外网主机的通信

PC1测试如下所示：

  1. PC > ipconfig
  2. FastEthernet0 Connection :( default port )
  3. Link - local IPv6 Address .........: FE80 :: 2D0 : FFFF : FE45 : CACC
  4. IP Address ......................: 192.168.1.1
  5. Subnet Mask .....................: 255.255.255.0
  6. Default Gateway .................: 192.168.1.254
  7. PC > ping 192.168.2.1
  8. Pinging 192.168.2.1 with 32 bytes of data :
  9. Reply from 192.168.2.1 : bytes = 32 time = 1ms TTL = 126
  10. Reply from 192.168.2.1 : bytes = 32 time = 0ms TTL = 126
  11. Reply from 192.168.2.1 : bytes = 32 time = 0ms TTL = 126
  12. Reply from 192.168.2.1 : bytes = 32 time = 0ms TTL = 126
  13. Ping statistics for 192.168.2.1 :
  14. Packets : Sent = 4 , Received = 4 , Lost = 0 ( 0 % loss ),
  15. Approximate round trip times in milli - seconds :
  16. Minimum = 0ms , Maximum = 1ms , Average = 0ms
  17. PC >

PC2测试如下所示：

  1. PC > ipconfig
  2. FastEthernet0 Connection :( default port )
  3. Link - local IPv6 Address .........: FE80 :: 2D0 : FFFF : FE45 : CACC
  4. IP Address ......................: 192.168.1.2
  5. Subnet Mask .....................: 255.255.255.0
  6. Default Gateway .................: 192.168.1.254
  7. PC > ping 192.168.2.1
  8. Pinging 192.168.2.1 with 32 bytes of data :
  9. Reply from 192.168.2.1 : bytes = 32 time = 1ms TTL = 126
  10. Reply from 192.168.2.1 : bytes = 32 time = 0ms TTL = 126
  11. Reply from 192.168.2.1 : bytes = 32 time = 0ms TTL = 126
  12. Reply from 192.168.2.1 : bytes = 32 time = 0ms TTL = 126
  13. Ping statistics for 192.168.2.1 :
  14. Packets : Sent = 4 , Received = 4 , Lost = 0 ( 0 % loss ),
  15. Approximate round trip times in milli - seconds :
  16. Minimum = 0ms , Maximum = 1ms , Average = 0ms

7）在R1上查看NAT转换表

转换表中的对应关系是动态的，如192.168.1.1被转换为61.159.62.131，但是下一次对外网的访问很有可能被转换为其他地址。

  1. tarena - R1#show ip nat translations
  2. Pro Inside global Inside local Outside local Outside global
  3. icmp 61.159.62.131 : 1362192.168.1.1 : 1362 192.168.2.1 : 1362 192.168.2.1 : 1362
  4. icmp 61.159.62.131 : 1392192.168.1.1 : 1392 192.168.2.1 : 1392 192.168.2.1 : 1392
  5. icmp 61.159.62.131 : 1393192.168.1.1 : 1393 192.168.2.1 : 1393 192.168.2.1 : 1393
  6. icmp 61.159.62.131 : 1394192.168.1.1 : 1394 192.168.2.1 : 1394 192.168.2.1 : 1394
  7. icmp 61.159.62.132 : 13 192.168.1.2 : 13 192.168.2.1 : 13 192.168.2.1 : 13
  8. icmp 61.159.62.132 : 14 192.168.1.2 : 14 192.168.2.1 : 14 192.168.2.1 : 14
  9. icmp 61.159.62.132 : 15 192.168.1.2 : 15 192.168.2.1 : 15 192.168.2.1 : 15
  10. icmp 61.159.62.132 : 16 192.168.1.2 : 16 192.168.2.1 : 16 192.168.2.1 : 16

4 案例4：PAT配置

4.1 问题

在R1配置PAT端口多路复用使企业内网192.168.1.0/24复用f0/1端口的IP，实现外部网络的访问。

4.2 方案

网络拓扑如图－5所示：

图－5

4.3 步骤

实现此案例需要按照如下步骤进行。

步骤一：基于端口的PAT配置限制

1）删除案例3中动态NAT配置

  1. tarena - R1 ( config ) #no ip nat inside source list 1
  2. tarena - R1 ( config ) #no ip nat pool natpool
  3. tarena - R1 ( config ) #no access - list 1

2）在R1上配置ACL

  1. tarena - R1 ( config ) #access - list 1 permit 192.168.1.0 0.0.0.255

3）关联ACL和路由器连接互联网的端口

该命令最后加上的overload表示复用。

  1. tarena - R1 ( config ) #ip nat inside source list 1 interface f0 / 1 overload

4）在R1上配置NAT内、外端口

  1. tarena - R1 ( config ) # interface f0 / 0
  2. tarena - R1 ( config - if ) #ip nat inside
  3. tarena - R1 ( config - if ) # interface f0 / 1
  4. tarena - R1 ( config - if ) #ip nat outside

5）分别在两台PC机上测试到外网主机的通信

PC1测试如下所示：

  1. PC > ipconfig
  2. FastEthernet0 Connection :( default port )
  3. Link - local IPv6 Address .........: FE80 :: 2D0 : FFFF : FE45 : CACC
  4. IP Address ......................: 192.168.1.1
  5. Subnet Mask .....................: 255.255.255.0
  6. Default Gateway .................: 192.168.1.254
  7. PC > ping 192.168.2.1
  8. Pinging 192.168.2.1 with 32 bytes of data :
  9. Reply from 192.168.2.1 : bytes = 32 time = 1ms TTL = 126
  10. Reply from 192.168.2.1 : bytes = 32 time = 0ms TTL = 126
  11. Reply from 192.168.2.1 : bytes = 32 time = 0ms TTL = 126
  12. Reply from 192.168.2.1 : bytes = 32 time = 0ms TTL = 126
  13. Ping statistics for 192.168.2.1 :
  14. Packets : Sent = 4 , Received = 4 , Lost = 0 ( 0 % loss ),
  15. Approximate round trip times in milli - seconds :
  16. Minimum = 0ms , Maximum = 1ms , Average = 0ms
  17. PC >

PC2测试如下所示：

  1. PC > ipconfig
  2. FastEthernet0 Connection :( default port )
  3. Link - local IPv6 Address .........: FE80 :: 2D0 : FFFF : FE45 : CACC
  4. IP Address ......................: 192.168.1.2
  5. Subnet Mask .....................: 255.255.255.0
  6. Default Gateway .................: 192.168.1.254
  7. PC > ping 192.168.2.1
  8. Pinging 192.168.2.1 with 32 bytes of data :
  9. Reply from 192.168.2.1 : bytes = 32 time = 1ms TTL = 126
  10. Reply from 192.168.2.1 : bytes = 32 time = 0ms TTL = 126
  11. Reply from 192.168.2.1 : bytes = 32 time = 0ms TTL = 126
  12. Reply from 192.168.2.1 : bytes = 32 time = 0ms TTL = 126
  13. Ping statistics for 192.168.2.1 :
  14. Packets : Sent = 4 , Received = 4 , Lost = 0 ( 0 % loss ),
  15. Approximate round trip times in milli - seconds :
  16. Minimum = 0ms , Maximum = 1ms , Average = 0ms
  17. PC >

6）在R1上查看NAT转换表

  1. tarena - R1#show ip nat translations
  2. Pro Inside global Inside local Outside local Outside global
  3. icmp 61.159.62.129 : 2029192.168.1.1 : 2029 192.168.2.1 : 2029 192.168.2.1 : 2029
  4. icmp 61.159.62.129 : 2030192.168.1.1 : 2030 192.168.2.1 : 2030 192.168.2.1 : 2030
  5. icmp 61.159.62.129 : 2031192.168.1.1 : 2031 192.168.2.1 : 2031 192.168.2.1 : 2031
  6. icmp 61.159.62.129 : 2032192.168.1.1 : 2032 192.168.2.1 : 2032 192.168.2.1 : 2032
  7. icmp 61.159.62.129 : 2033192.168.1.1 : 2033 192.168.2.1 : 2033 192.168.2.1 : 2033
  8. icmp 61.159.62.129 : 2034192.168.1.1 : 2034 192.168.2.1 : 2034 192.168.2.1 : 2034
  9. icmp 61.159.62.129 : 2035192.168.1.1 : 2035 192.168.2.1 : 2035 192.168.2.1 : 2035

输出结果显示，所有的内网IP地址在访问外网前均被转换成了路由器端口的IP地址。

5 案例5：办公区Internet的访问

5.1 问题

在R1配置PAT端口多路复用使企业内网192.168.1.0/24复用f0/1端口的IP，实现外部网络的访问。

5.2 方案

网络拓扑如图－6所示：

图－6

5.3 步骤

实现此案例需要按照如下步骤进行。

步骤一：在SM1划分vlan2、vlan3、vlan4 并给SM1配置虚端口IP并开启路由功能，1-4接口开启trunk

1）创建vlan并设置管理IP，开启路由功能，并把相应的接口划分到vlan下

  1. SM1 ( config ) ip routing
  2. SM1 ( config ) #vlan 2
  3. SM1 ( config - vlan ) #vlan 3
  4. SM1 ( config - vlan ) #vlan 4
  5. SM1 ( config - vlan ) #
  6. SM1 ( config - vlan ) #exit
  7. SM1 ( config ) # interface vlan 1
  8. SM1 ( config - if ) #ip address 192.168.1.254 255.255.255.0
  9. SM1 ( config - if ) #eixt
  10. SM1 ( config - if ) #no shutdown
  11. SM1 ( config - if ) #exit
  12. SM1 ( config ) # interface vlan 2
  13. SM1 ( config - if ) #ip address 192.168.2.254 255.255.255.0
  14. SM1 ( config - if ) #no shutdown
  15. SM1 ( config - if ) #exit
  16. SM1 ( config ) # interface vlan 3
  17. SM1 ( config - if ) #ip address 192.168.3.254 255.255.255.0
  18. SM1 ( config - if ) #no shutdown
  19. SM1 ( config - if ) #exit
  20. SM1 ( config ) # interface vlan 4
  21. SM1 ( config - if ) #ip address 192.168.4.254 255.255.255.0
  22. SM1 ( config - if ) #no shutdown
  23. sw2 ( config ) #vlan 2
  24. sw2 ( config - vlan ) #exit
  25. sw2 ( config ) # interface fastEthernet 0 / 1
  26. sw2 ( config - if ) #switchport access vlan 2
  27. sw3 ( config ) #vlan 3
  28. sw3 ( config - vlan ) #exit
  29. sw3 ( config ) # interface fastEthernet 0 / 1
  30. sw3 ( config - if ) #switchport access vlan 3
  31. sw4 ( config ) #vlan 4
  32. sw4 ( config - vlan ) #exit
  33. sw4 ( config ) # interface fastEthernet 0 / 1
  34. sw4 ( config - if ) #switchport access vlan 4

2）交换机之间所连接的接口开启trunk

  1. SM1 ( config ) # interface range f0 / 1 - 4
  2. SM1 ( config - if - range ) #switchport trunk encapsulation dot1q
  3. SM1 ( config - if - range ) #switchport mode trunk
  4. sw1 ( config ) # interface fastEthernet 0 / 3
  5. sw1 ( config - if ) #switchport mode trunk
  6. sw2 ( config ) # interface fastEthernet 0 / 3
  7. sw2 ( config - if ) #switchport mode trunk
  8. sw3 ( config ) # interface fastEthernet 0 / 3
  9. sw3 ( config - if ) #switchport mode trunk
  10. sw4 ( config ) # interface fastEthernet 0 / 3
  11. sw4 ( config - if ) #switchport mode trunk

3）测试vlan之间的连通性

  1. PC > ipconfig
  2. FastEthernet0 Connection :( default port )
  3. Link - local IPv6 Address .........: FE80 :: 290 : 21FF : FEC2 : 1A50
  4. IP Address ......................: 192.168.1.1
  5. Subnet Mask .....................: 255.255.255.0
  6. Default Gateway .................: 192.168.1.254
  7. PC > ping 192.168.2.1
  8. Pinging 192.168.2.1 with 32 bytes of data :
  9. Reply from 192.168.2.1 : bytes = 32 time = 0ms TTL = 127
  10. Reply from 192.168.2.1 : bytes = 32 time = 0ms TTL = 127
  11. Reply from 192.168.2.1 : bytes = 32 time = 0ms TTL = 127
  12. Reply from 192.168.2.1 : bytes = 32 time = 1ms TTL = 12
  13. Ping statistics for 192.168.2.1 :
  14. Packets : Sent = 4 , Received = 3 , Lost = 1 ( 25 % loss ),
  15. Approximate round trip times in milli - seconds :
  16. Minimum = 0ms , Maximum = 1ms , Average = 0ms
  17. PC > ping 192.168.3.1
  18. Pinging 192.168.3.1 with 32 bytes of data :
  19. Reply from 192.168.2.1 : bytes = 32 time = 0ms TTL = 127
  20. Reply from 192.168.3.1 : bytes = 32 time = 0ms TTL = 127
  21. Reply from 192.168.3.1 : bytes = 32 time = 0ms TTL = 127
  22. Reply from 192.168.3.1 : bytes = 32 time = 1ms TTL = 127
  23. Ping statistics for 192.168.3.1 :
  24. Packets : Sent = 4 , Received = 3 , Lost = 1 ( 25 % loss ),
  25. Approximate round trip times in milli - seconds :
  26. Minimum = 0ms , Maximum = 1ms , Average = 0ms
  27. PC > ping 192.168.4.1
  28. Pinging 192.168.4.1 with 32 bytes of data :
  29. Reply from 192.168.2.1 : bytes = 32 time = 0ms TTL = 127
  30. Reply from 192.168.2.1 : bytes = 32 time = 0ms TTL = 127
  31. Reply from 192.168.2.1 : bytes = 32 time = 0ms TTL = 127
  32. Reply from 192.168.4.1 : bytes = 32 time = 0ms TTL = 127
  33. Ping statistics for 192.168.4.1 :
  34. Packets : Sent = 4 , Received = 1 , Lost = 3 ( 75 % loss ),
  35. Approximate round trip times in milli - seconds :
  36. Minimum = 0ms , Maximum = 0ms , Average = 0ms

4）为SM1与路由器连接的接口和路由器配置IP并启用动态路由RIP协议.

  1. SM1 ( config ) # interface fastEthernet 0 / 5
  2. SM1 ( config - if ) #no switchport
  3. SM1 ( config - if ) #ip add 192.168.5.1 255.255.255.0
  4. SM1 ( config - if ) #no shutdown
  5. SM1 ( config - if ) #exit
  6. SM1 ( config ) #router rip
  7. SM1 ( config - router ) #version 2
  8. SM1 ( config - router ) #no auto - summary
  9. SM1 ( config - router ) #network 192.168.1.0
  10. SM1 ( config - router ) #network 192.168.2.0
  11. SM1 ( config - router ) #network 192.168.3.0
  12. SM1 ( config - router ) #network 192.168.4.0
  13. SM1 ( config - router ) #network 192.168.5.0
  14. Router ( config ) # interface fastEthernet 0 / 0
  15. Router ( config - if ) #ip address 192.168.5.2 255.255.255.0
  16. Router ( config - if ) #no shutdown
  17. Router ( config - if ) #exit
  18. Router ( config ) # interface fastEthernet 0 / 1
  19. Router ( config - if ) #ip address 61.159.62.129 255.255.255.248
  20. Router ( config - if ) #exit
  21. Router ( config ) #router rip
  22. Router ( config - router ) #version 2
  23. Router ( config - router ) #no auto - summary
  24. Router ( config - router ) #network 192.168.5.0

5）在路由器上配置默认路由并发布到RIP协议里并在三成交换机SM1上查看路由表

  1. Router ( config ) #ip route 0.0.0.0 0.0.0.0 f0 / 1
  2. Router ( config ) #router rip
  3. Router ( config - router ) # default - information originate

SM路由表如下所示：

  1. SM1# show ip route
  2. Codes : C - connected , S - static , I - IGRP , R - RIP , M - mobile , B - BGP
  3. D - EIGRP , EX - EIGRP external , O - OSPF , IA - OSPF inter area
  4. N1 - OSPF NSSA external type 1 , N2 - OSPF NSSA external type 2
  5. E1 - OSPF external type 1 , E2 - OSPF external type 2 , E - EGP
  6. i - IS - IS , L1 - IS - IS level -1 , L2 - IS - IS level -2 , ia - IS - IS inter area
  7. * - candidate default , U - per - user static route , o - ODR
  8. P - periodic downloaded static route
  9. Gateway of last resort is 192.168.5.2 to network 0.0.0.0
  10. C 192.168.1.0 / 24 is directly connected , Vlan1
  11. C 192.168.2.0 / 24 is directly connected , Vlan2
  12. C 192.168.3.0 / 24 is directly connected , Vlan3
  13. C 192.168.4.0 / 24 is directly connected , Vlan4
  14. C 192.168.5.0 / 24 is directly connected , FastEthernet0 / 5
  15. R * 0.0.0.0 / 0 [ 120 / 1 ] via 192.168.5.2 , 00 : 00 : 18 , FastEthernet0 / 5

6）在路由器上配置PAT

  1. Router ( config ) #access - list 1 permit 192.168.4.0 0.0.0.255
  2. Router ( config ) #ip nat inside source list 1 interface f0 / 1
  3. Router ( config ) # interface fastEthernet 0 / 0
  4. Router ( config - if ) #ip nat inside
  5. Router ( config - if ) #exit
  6. Router ( config ) # interface fastEthernet 0 / 1
  7. Router ( config - if ) #ip nat outside

7）用192.168.4.0和192.168.1.0测试网络连通性

PC1

  1. PC > ping 61.159.62.130
  2. Pinging 61.159.62.130 with 32 bytes of data :
  3. Request timed out .
  4. Request timed out .
  5. Request timed out .
  6. Request timed out .
  7. Ping statistics for 61.159.62.130 :
  8. Packets : Sent = 4 , Received = 0 , Lost = 4 ( 100 % loss ),

PC4

  1. PC > ping 61.159.62.130
  2. Pinging 61.159.62.130 with 32 bytes of data :
  3. Reply from 61.159.62.130 : bytes = 32 time = 0ms TTL = 126
  4. Reply from 61.159.62.130 : bytes = 32 time = 0ms TTL = 126
  5. Reply from 61.159.62.130 : bytes = 32 time = 0ms TTL = 126
  6. Reply from 61.159.62.130 : bytes = 32 time = 0ms TTL = 126
  7. Ping statistics for 61.159.62.130 :
  8. Packets : Sent = 4 , Received = 4 , Lost = 0 ( 0 % loss ),
  9. Approximate round trip times in milli - seconds :
  10. Minimum = 0ms , Maximum = 0ms , Average = 0ms

结果显示只有办公网可以访问Internet

相关阅读

目录[+]