思科 配置NAT PNAT 端口映射

      image.png

思路及步驟:

            1.配置PC1 的ip:192.168.10.1 255.255.255.0


            image.png


                 配置PC2 的ip:192.168.10.2 255.255.255.0


                    image.png


                2.配置R3的0端口網關:192.168.10.254 255.255.255.0

                    配置R3的1端口ip:100.1.1.1 255.255.255.0


                        image.png

                   3. 配置R4的1端口ip:100.1.1.2 255.255.255.0 

                        配置R4的0端口ip:200.1.1.1 255.255.255.0

                                image.png


                    4. 配置R5的1端口ip:200.1.1.2 255.255.255.0


                                image.png


                        5.在R3全局配置模式下配置浮動靜態路由:

                                ip route 0.0.0.0 0.0.0.0 100.1.1.2

                                    image.png


                            

                 6.在R4全局配置模式下 配置RIP

                               router rip

                               version 2

                               no auto-summary

                               network 100.0.0.0

                               network 200.1.1.0

                               passive-interface g1/0

                        image.png


                

                7.在R5全局模式下   配置RIP

                         router rip

                          version 2

                         no auto-summayr

                         network 200.1.1.0


                        image.png


                

                8.確定NAT的邊界 在R3全局模式下配置:

                        interface g1/0

                        ip nat inside

                        interface g2/0

                        ip nat  ouside

                            image.png

                    9.在R3全局配置模式下(

                        配置:ip nat inside sourse static 192.168.10.1 100.1.1.1

                                image.png

                        或配置:ip nat inside sourse static 192.168.10.2 100.1.1.1

                                image.png

                10.    pc機1或2 可以ping R5

                            pc1:

                                image.png

                            pc2:

                                image.png

                        


=========================================================================================================



配置PNAT:

        思路及步驟:

                    步驟1--8 與配置NAT的步驟相同


                        9.在R3全局配置模式下           

                            配置:access-list 1 permit 192.168.10.0 0.0.0.255(通配符)

                            ip nat inside sourse list 1 interfaceg1/0(外網端口)

                            image.png

                    

                10.測試:   pc1和pc2 都可ping通 R5

                            pc1:

                                image.png


                               pc2:

                                  image.png


                           11.驗證:

                                11.1     show ip nat statistics

                                    image.png

                                11.2      show ip access-list

                                    image.png

                                11.3  show ip nat translation(未ping之前 無任何顯示  ping通之後就會顯示)

                                        ping之前:

                                                image.png

                                        ping之後:

                                                image.png

                                11.4  特權模式下 啓用抓包功能

                                            debug ip nat

                                                image.png


=========================================================================================================


    端口映射:

            首先要配置好PNAT  所有設備均可ping通。

                    

                       1.在RT3全局配置模式下

                                    GW(config)#ip nat inside sourse static tcp 192.168.10.1 23  100.1.1.1 23456                                                                           

                                                                                    (192.168.10.1爲pc1機的ip 23爲tcp端口號  100.1.1.1爲網關ip  23456僅爲進入指定端口的號 無其他意義)


                        image.png


                    

                        2.在PC1在全局配置模式下:

                                line vty 0 4

                                no login

                                    image.png

                        3.在網關R3上,在全局模式下配置:

                                    

                                 line vty 0 4

                                 no login

                                image.png

                        

                                4.在R5權限模式下進行測試:

                                        telnet 100.1.1.1 23456

                                    image.png




                                






                    

            

                            

            



 

              

發表評論
所有評論
還沒有人評論,想成為第一個評論的人麼? 請在上方評論欄輸入並且點擊發布.
相關文章