《计算机组工程与实训项目五任务二》由会员分享，可在线阅读，更多相关《计算机组工程与实训项目五任务二（16页珍藏版）》请在金锄头文库上搜索。
1、NAT/NAPTNAT/NAPT配置配置Evaluation only.Evaluation only. Created with Aspose.Slides for .NET 3.5 Client Profile 5.2.0.0.Created with Aspose.Slides for .NET 3.5 Client Profile 5.2.0.0. Copyright 2004-2011 Aspose Pty Ltd.Copyright 2004-2011 Aspose Pty Ltd.知识内容与要求知识内容与要求了解NAT的含义、作用、类型；理解NAT和NAPT的工作过程；了解静态N
2、AT/NAPT和动态NAT/NAPT的工作机制；应用命令配置静态NAT和NAPT的方法；应用命令配置动态NAT和NAPT的方法。应用NAT/NAPT的监视和维护命令。 Evaluation only.Evaluation only. Created with Aspose.Slides for .NET 3.5 Client Profile 5.2.0.0.Created with Aspose.Slides for .NET 3.5 Client Profile 5.2.0.0. Copyright 2004-2011 Aspose Pty Ltd.Copyright 2004-2011 A
3、spose Pty Ltd.技能目标与要求技能目标与要求能熟练配置静态NAT和NAPT；能熟练配置动态NAT和NAPT；能正确使用NAT/NAPT的监视和维护命令。 Evaluation only.Evaluation only. Created with Aspose.Slides for .NET 3.5 Client Profile 5.2.0.0.Created with Aspose.Slides for .NET 3.5 Client Profile 5.2.0.0. Copyright 2004-2011 Aspose Pty Ltd.Copyright 2004-2011 As
4、pose Pty Ltd.什么是NAT/NAPT概念：NAT就是将网络地址从一个地址空间转换到另外一个地址空间 的一个行为 NATNAT的类型的类型NATNAT（Network Address TranslationNetwork Address Translation）转换后，一个本地IP地址对应一个全局IP地址NAPT NAPT （Network Address Port TranslationNetwork Address Port Translation）转换后，多个本地地址对应一个全局IP地址Evaluation only.Evaluation only. Created with
5、Aspose.Slides for .NET 3.5 Client Profile 5.2.0.0.Created with Aspose.Slides for .NET 3.5 Client Profile 5.2.0.0. Copyright 2004-2011 Aspose Pty Ltd.Copyright 2004-2011 Aspose Pty Ltd.NAT/NAPT的术语NAT中用到的接口类型：内部网络 Inside外部网络 Outside NATNAT中常见的术语：中常见的术语：内部本地地址内部本地地址Inside Local AddressInside Local Addr
6、ess内部全局地址内部全局地址Inside Global AddressInside Global Address外部本地地址外部本地地址Outside Local AddressOutside Local Address外部全局地址外部全局地址Outside Global AddressOutside Global Address互联网 OutsideInside 企业内部网外部网Evaluation only.Evaluation only. Created with Aspose.Slides for .NET 3.5 Client Profile 5.2.0.0.Created wit
7、h Aspose.Slides for .NET 3.5 Client Profile 5.2.0.0. Copyright 2004-2011 Aspose Pty Ltd.Copyright 2004-2011 Aspose Pty Ltd.NAT工作原理200.8.7.3/24200.8.7.4/2463.5.8.1192.168.1.5192.168.1.7内部本地地址内部全局地址 192.168.1.7200.8.7.3 192.168.1.5200.8.7.4源IP:192.168.1.7目的IP:63.5.8.1源IP:200.8.7.3 目的IP:63.5.8.1源IP:63.
8、5.8.1 目的IP:200.8.7.3源IP:63.5.8.1 目的IP:192.168.1.7源IP:200.8.7.3 目的IP:63.5.8.1源IP:63.5.8.1 目的IP:192.168.1.7Evaluation only.Evaluation only. Created with Aspose.Slides for .NET 3.5 Client Profile 5.2.0.0.Created with Aspose.Slides for .NET 3.5 Client Profile 5.2.0.0. Copyright 2004-2011 Aspose Pty Ltd.
9、Copyright 2004-2011 Aspose Pty Ltd.NAPT工作原理200.8.7.3/24 63.5.8.1192.168.1.5192.168.1.7源IP:192.168.1.7:1024目的IP:63.5.8.1:80内部本地地址：端口内部全局地址:端口外部全局地址:端口192.168.1.7:1024200.8.7.3:102463.5.8.1：80192.168.1.5:1136200.8.7.3:113663.5.8.1：80源IP:200.8.7.3:1024 目的IP:63.5.8.1:80源IP:63.5.8.1:80 目的IP:200.8.7.3:102
10、4源IP:63.5.8.1 :80 目的IP:192.168.1.7:1024Web服务源IP:200.8.7.3:1024 目的IP:63.5.8.1:80源IP:63.5.8.1 :80 目的IP:192.168.1.7:1024Evaluation only.Evaluation only. Created with Aspose.Slides for .NET 3.5 Client Profile 5.2.0.0.Created with Aspose.Slides for .NET 3.5 Client Profile 5.2.0.0. Copyright 2004-2011 Asp
11、ose Pty Ltd.Copyright 2004-2011 Aspose Pty Ltd.使用NAPT的情况在以下几种情况下，需要使用NAPT技术：缺乏全局IP地址,甚至没有专门申请的全局IP地址，只有一个连接 ISP的全局IP地址内部网要求上网的主机数很多提高内网的安全性Evaluation only.Evaluation only. Created with Aspose.Slides for .NET 3.5 Client Profile 5.2.0.0.Created with Aspose.Slides for .NET 3.5 Client Profile 5.2.0.0. C
12、opyright 2004-2011 Aspose Pty Ltd.Copyright 2004-2011 Aspose Pty Ltd.NAT/NAPT的配置NAT/NAPT的配置有两种静态NAT/NAPT动态NAT/NAPT 静态静态NAT/NAPTNAT/NAPT需要向外网络提供信息服务的主机需要向外网络提供信息服务的主机永久的一对一永久的一对一IPIP地址映射关系地址映射关系 动态动态NAT/NAPTNAT/NAPT只访问外网服务，不提供信息服务的主机只访问外网服务，不提供信息服务的主机内部主机数可以大于全局内部主机数可以大于全局IPIP地址数地址数最多访问外网主机数决定于全局最多访问
13、外网主机数决定于全局IPIP地址数地址数临时的一对一临时的一对一IPIP地址映射关系地址映射关系Evaluation only.Evaluation only. Created with Aspose.Slides for .NET 3.5 Client Profile 5.2.0.0.Created with Aspose.Slides for .NET 3.5 Client Profile 5.2.0.0. Copyright 2004-2011 Aspose Pty Ltd.Copyright 2004-2011 Aspose Pty Ltd.静态NAT配置步骤1、定义内网接口和外网接口
14、Router(config)#interface fastethernet 1/0 Router(config-if)#ip nat outside Router(config)#interface fastethernet 1/1 Router(config-if)#ip nat inside2 2、建立静态的映射关系、建立静态的映射关系Router(config)#ip nat inside source static 192.168.1.7 200.8.7.3Evaluation only.Evaluation only. Created with Aspose.Slides for .
15、NET 3.5 Client Profile 5.2.0.0.Created with Aspose.Slides for .NET 3.5 Client Profile 5.2.0.0. Copyright 2004-2011 Aspose Pty Ltd.Copyright 2004-2011 Aspose Pty Ltd.静态NAPT1、定义内网接口和外网接口Router(config)#interface fastethernet 0Router(config-if)#ip nat outsideRouter(config)#interface fastethernet 1Router
16、(config-if)#ip nat inside2 2、建立静态的映射关系、建立静态的映射关系Router(config)#ip nat inside source static tcpRouter(config)#ip nat inside source static tcp192.168.1.7 1024 200.8.7.3 1024 192.168.1.7 1024 200.8.7.3 1024Router(config)#ip nat inside source static udp Router(config)#ip nat inside source static udp 192.168.1.7 1024 200.8.7.3 1024 192.168.1.7 1024 200.8.7.3 1024Evaluati
