NAT地址转换实验演练的几种方法

AR1路由器配置如下：

[AR1]dis cu
#
sysname AR1
#
acl number 2000
rule 10 permit source 192.168.1.0 0.0.0.255
#
interface GigabitEthernet0/0/0
ip address 192.168.1.254 255.255.255.0
#
interface GigabitEthernet0/0/1
ip address 12.1.1.1 255.255.255.0
nat outbound 2000

AR2配置信息如下：

<AR2>dis cu

#
sysname AR2
#
interface GigabitEthernet0/0/0
ip address 12.1.1.254 255.255.255.0

全局下配置静态nat
nat static global 12.1.1.2 inside 192.168.1.1 netmask 255.255.255.255
interface GigabitEthernet0/0/1
ip address 12.1.1.1 255.255.255.0
nat static enable
接口下配置静态nat：
[AR1-GigabitEthernet0/0/1]nat static global 12.1.1.2 inside 192.168.1.1

地址池多个ip：
nat address-group 1 12.1.1.2 12.1.1.10
[AR1]acl 2000
[AR1-acl-basic-2000]rule 10 permit source 192.168.1.0 0.0.0.255
[AR1-GigabitEthernet0/0/1]nat outbound 2000 address-group 1

地址池单个ip：
[AR1]nat address-group 1 12.1.1.2 12.1.1.2
[AR1]int g0/0/1
[AR1-GigabitEthernet0/0/1]nat outbound 2000 address-group 1

easyip:
acl number 2000
rule 10 permit source 192.168.1.0 0.0.0.255
interface GigabitEthernet0/0/1
ip address 12.1.1.1 255.255.255.0
nat outbound 2000

地址映射：
interface GigabitEthernet0/0/1
ip address 12.1.1.1 255.255.255.0
nat server protocol tcp global 12.1.1.2 www inside 192.168.1.2 www

验证实验：ping发现可以通。