动态NAT地址转换配置

动态NAT地址转换配置要求：10.0.1.0/24可以访问外网，其它不行。

实验环境：Cisco Packet Tracer实验条件：三台PC,两台服务器，三个路由器，若干交叉线，若干DCE串口线。

实验步骤：1、实现全网互通：R1: Router>enRouter#conf tEnter configuration commands, one per line. End with CNTL/Z. Router(config)#hoRouter(config)#hostname R1R1(config)#int f0/0R1(config-if)#ip adR1(config-if)#ip address 10.0.1.254 255.255.255.0R1(config-if)#no shutR1(config-if)#no shutdownR1(config-if)#int f0/1R1(config-if)#ip address 10.0.2.254 255.255.255.0R1(config-if)#no shutdownR1(config-if)#int s1/0R1(config-if)#ip adR1(config-if)#ip address 30.0.0.1 255.255.255.0R1(config-if)#clR1(config-if)#clock raR1(config-if)#clock rate 64000R1(config-if)#no shutdownR1(config-if)#R1(config)#roR1(config)#router osR1(config)#router ospf 1R1(config-router)#roR1(config-router)#router-id 1.1.1.1R1(config-router)#Reload or use "clear ip ospf process" command, for this to take effectR1(config-router)#neR1(config-router)#network 10.0.1.0 0.0.0.255 arR1(config-router)#network 10.0.1.0 0.0.0.255 area 1R1(config-router)#network 10.0.2.0 0.0.0.255 area 1R1(config-router)#network 30.0.0.0 0.0.0.255 area 1R1(config-router)#R2:Router#enRouter#conf tEnter configuration commands, one per line. End with CNTL/Z.Router(config)#hoRouter(config)#hostname R2R2(config)#int s1/1R2(config-if)#ip adR2(config-if)#ip address 30.0.0.2 255.255.255.0R2(config-if)#no shuR2(config-if)#no shutdownR2(config-if)#int f0/0R2(config-if)#ip address 20.0.0.254 255.255.255.0R2(config-if)#no shutdownR2(config-if)#int f0/1R2(config-if)#ip adR2(config-if)#ip address 60.0.0.254 255.255.255.0R2(config-if)#no shutdownR2(config-if)#int s1/0R2(config-if)#ip adR2(config-if)#ip address 40.0.0.1 255.255.255.0R2(config-if)#clR2(config-if)#clock raR2(config-if)#clock rate 64000R2(config-if)#no shR2(config-if)#no shutdownR2(config-if)#R2>ENR2#conf tEnter configuration commands, one per line. End with CNTL/Z.R2(config)#roR2(config)#router osR2(config)#router ospf 1R2(config-router)#router-id 2.2.2.2R2(config-router)#Reload or use "clear ip ospf process" command, for this to take effectR2(config-router)#netR2(config-router)#network 30.0.0.0 0.0.0.255 arR2(config-router)#network 30.0.0.0 0.0.0.255 area 1R2(config-router)#network 20.0.0.0 0.0.0.255 area 0R2(config-router)#network 60.0.0.0 0.0.0.255 area 0R2(config-router)#network 40.0.0.0 0.0.0.255 area 2R2(config-router)#R3:Router>ENRouter#CONF TEnter configuration commands, one per line. End with CNTL/Z.Router(config)#HORouter(config)#HOstname R3R3(config)#int s1/2R3(config-if)#ip adR3(config-if)#ip address 40.0.0.2 255.255.255.0R3(config-if)#no shR3(config-if)#no shutdownR3(config-if)#int f0/0R3(config-if)#ip address 50.0.0.254 255.255.255.0R3(config-if)#no shutdownR3(config-if)#R3>enR3#conf tEnter configuration commands, one per line. End with CNTL/Z.R3(config)#roR3(config)#router osR3(config)#router ospf 1R3(config-router)#roR3(config-router)#router-id 3.3.3.3R3(config-router)#Reload or use "clear ip ospf process" command, for this to take effectR3(config-router)#netR3(config-router)#network 40.0.0.0 0.0.0.255 arR3(config-router)#network 40.0.0.0 0.0.0.255 area 2R3(config-router)#network 50.0.0.0 0.0.0.255 area 2R3(config-router)#实现全网互通：2、先将R1.R2设置为默认路由R1>enR1#conf tEnter configuration commands, one per line. End with CNTL/Z.R1(config)#ip roR1(config)#ip route 0.0.0.0 0.0.0.0 30.0.0.2R1(config)#R2#R2#R2#enR2#conf tEnter configuration commands, one per line. End with CNTL/Z.R2(config)#ip route 0.0.0.0 0.0.0.0 40.0.0.2R2(config)#3、删除之前公布的40.0.0.0 0.0.0.255网络R2#enR2#conf tEnter configuration commands, one per line. End with CNTL/Z.R2(config)#roR2(config)#router osR2(config)#router ospf 1R2(config-router)#no netR2(config-router)#no network 40.0.0.0 0.0.0.255 arR2(config-router)#no network 40.0.0.0 0.0.0.255 area 2 R2(config-router)#03:25:18: %OSPF-5-ADJCHG: Process 1, Nbr 3.3.3.3 onSerial1/0 from FULL to DOWN, Neighbor Down: Interface down or detached4、创建一个地址池R2(config)#ip nat pooR2(config)#ip nat pool wang 40.0.0.10 40.0.0.20 netR2(config)#ip nat pool wang 40.0.0.10 40.0.0.20 netmask 255.255.255.0R2(config)#5、创建一个访问列表并绑定：R2：R2>enR2#conf tEnter configuration commands, one per line. End with CNTL/Z.R2(config)#accR2(config)#access-list 1 perR2(config)#access-list 1 permit 10.0.1.0 0.0.0.255R2(config)#ip nat insR2(config)#ip nat inside sourR2(config)#ip nat inside source liR2(config)#ip nat inside source list 1 pooR2(config)#ip nat inside source list 1 pool wang6、分为内部端口和外部端口R2(config)#int s1/1R2(config-if)#ip nat insiR2(config-if)#ip nat insideR2(config-if)#int s1/0R2(config-if)#ip natR2(config-if)#ip nat outR2(config-if)#ip nat outsideR2(config-if)#7、查看转换映射记录R2#sh ip nat translations实验结果：PC10.0.2.1:PC>ping 50.0.0.1Pinging 50.0.0.1 with 32 bytes of data:Request timed out.Request timed out.Request timed out.Request timed out.Ping statistics for 50.0.0.1:Packets: Sent = 4, Received = 0, Lost = 4 (100% loss), PC10.0.1.1:PC>ping 50.0.0.1Pinging 50.0.0.1 with 32 bytes of data:Reply from 50.0.0.1: bytes=32 time=3ms TTL=125Reply from 50.0.0.1: bytes=32 time=4ms TTL=125Reply from 50.0.0.1: bytes=32 time=2ms TTL=125Reply from 50.0.0.1: bytes=32 time=4ms TTL=125Ping statistics for 50.0.0.1:Packets: Sent = 4, Received = 4, Lost = 0 (0% loss), Approximate round trip times in milli-seconds:Minimum = 2ms, Maximum = 4ms, Average = 3ms。