《网络地址转换(NAT及PAT)配置》由会员分享,可在线阅读,更多相关《网络地址转换(NAT及PAT)配置(21页珍藏版)》请在金锄头文库上搜索。
1、网络地址转换(NAT及PAT)配置(1)图形化拓扑(2)网络拓扑文件# - Cisco 3640 router contains four slots in which you can install modules.# - No fixed LAN or WAN interfaces.# - Available network modules for Cisco 3640 Router:# - NM-4E (Ethernet, 4 ports)# - NM-1FE-TX (FastEthernet, 1 port)# - NM-16ESW (Ethernet switch module, 1
2、6 ports)# - NM-4T (Serial, 4 ports)#autostart = falseLocalhostport = 7200udp = 10000workingdir = D:dynamipstmp 3640 image = D:dynamipsimagesc3640-jk9o3s-mz.123-10.BIN ram = 128 mmap = true confreg = 0x2102 # slot0 = # slot1 = # slot2 = # slot3 = Router R1 model = 3640 console = 3001 e0/0 = NIO_gen_e
3、th:DeviceNPF_0D4F8E30-AE2E-452E-AFD8-1FC8D3F7E110 # connect to MS LoopBack Driver e0/1 = NIO_udp:30000:127.0.0.1:20000 # connect to VPC 1 Router R2 model = 3640 console = 3002 s2/1 = R1 s1/2 s2/3 = R3 s3/2 e0/1 = NIO_udp:30001:127.0.0.1:20001 # connect to VPC 2 Router R3 model = 3640 console = 3003
4、e0/1 = NIO_udp:30002:127.0.0.1:20002 # connect to VPC 3(3)配置清单R1#show running-config Building configuration.Current configuration : 1449 bytes!version 12.3service timestamps debug datetime msecservice timestamps log datetime msecno service password-encryption!hostname R1!boot-start-markerboot-end-ma
5、rker!no aaa new-modelip subnet-zero!no ip domain lookup!ip cefip audit po max-events 100no ftp-server write-enable! ! !interface Ethernet0/0 ip address 172.16.11.1 255.255.255.0 ip nat inside half-duplex no clns route-cache! interface Ethernet0/1 ip address 172.16.10.1 255.255.255.0 ip nat inside ha
6、lf-duplex no clns route-cache!interface Ethernet0/2 no ip address shutdown half-duplex no clns route-cache!interface Ethernet0/3 no ip address shutdown half-duplex no clns route-cache!interface Serial1/0 no ip address shutdown serial restart-delay 0 no fair-queue no clns route-cache!interface Serial
7、1/1 no ip address shutdown serial restart-delay 0 no clns route-cache!interface Serial1/2 ip address 61.139.21.1 255.255.255.0 ip nat outside serial restart-delay 0 no clns route-cache!interface Serial1/3 no ip address shutdown serial restart-delay 0 no clns route-cache!router eigrp 100 network 61.0
8、.0.0 auto-summary!ip nat inside source list 1 interface Serial1/2 overloadip http serverno ip http secure-serverip classless!access-list 1 permit 172.16.0.0 0.0.255.255!line con 0 exec-timeout 0 0 logging synchronousline aux 0line vty 0 4 login !EndR2#show running-config Building configuration.Curre
9、nt configuration : 1530 bytes!version 12.3service timestamps debug datetime msecservice timestamps log datetime msecno service password-encryption!hostname R2!boot-start-markerboot-end-marker!no aaa new-modelip subnet-zero!no ip domain lookup!ip cefip audit po max-events 100no ftp-server write-enabl
10、e! ! !interface Loopback0 ip address 61.139.22.1 255.255.255.0 no clns route-cache!interface Ethernet0/0 no ip address shutdown half-duplex no clns route-cache!interface Ethernet0/1 ip address 172.16.20.1 255.255.255.0 ip nat inside half-duplex no clns route-cache!interface Ethernet0/2 no ip address
11、 shutdown half-duplex no clns route-cache!interface Ethernet0/3 no ip address shutdown half-duplex no clns route-cache!interface Serial2/0 no ip address shutdown serial restart-delay 0 no fair-queue no clns route-cache!interface Serial2/1 ip address 61.139.21.2 255.255.255.0 ip nat outside serial re
12、start-delay 0 no clns route-cache!interface Serial2/2 no ip address shutdown serial restart-delay 0 no clns route-cache!interface Serial2/3 ip address 61.139.32.2 255.255.255.0 ip nat outside serial restart-delay 0 no clns route-cache!router eigrp 100 network 61.0.0.0 auto-summary!ip nat inside sour
13、ce list 1 interface Loopback0 overloadip http serverno ip http secure-serverip classless!access-list 1 permit 172.16.20.0 0.0.0.255!line con 0 exec-timeout 0 0 logging synchronousline aux 0line vty 0 4 login!EndR3#show running-config Building configuration.Current configuration : 1405 bytes!version 12.3service time