《NAT转换各种配置.doc》由会员分享，可在线阅读，更多相关《NAT转换各种配置.doc（4页珍藏版）》请在金锄头文库上搜索。
1、*全部采用端口*ISP分配的IP202.99.160.129interface fastethernet0/0ip address 192.168.1.1 255.255.255.0duplex autospeed autoin nat insideno shutdowninterface fastethernet0/1ip address 192.168.2.1 255.255.255.0duplex autospeed autoin nat outsideno shutdownip nat pool OnlyYou 202.99.160.130 202.99.160.130 netmask
2、 255.255.255.252/OnlyYou代表地址池的名称。 2个202.99.160.130是代表只用一个ip做转换后ip.access-list 1 permit 192.168.1.0 0.0.0.255access-list 1 permit 192.168.2.0 0.0.0.255ip nat inside source list1 pool OnlyYou overload*动态地址转换+端口*ISP分配的IP 有：202.99.160.130190 255.255.255.192Interface fastethernet0/1Ip address 192.168.1.1
3、 255.255.255.0Ip address 192.168.2.1 255.255.255.0 secondaryDuplex autoSpeed autoIp nat inside No shutdownInterface serial 0/0Ip address 202.99.160.129 255.255.255.192Duplex autoSpeed autoIp nat outsideNo shutdwonIp nat pool OutPort 202.99.160.190 202.99.160.190 netmask 255.255.255.192Ip nat pool Ou
4、tPool 202.99.160.130 202.99.160.190 netmask 255.255.255.192Ip nat inside source list1 pool OutPort /192.168.1.0段主机全部转成202.99.160.190Ip nat inside source list2 pool OutPool /出于访问ftp站点等考虑：192.168.2.0和192.168.3.0段主机全部/转成202.99.160.130到202.99.160.189中的所有地址。Access-list1 permit 192.168.1.0 0.0.0.255Access
5、-list2 permit 192.168.2.0 0.0.0.255Access-list2 permit 192.168.3.0 0.0.0.255*静态地址转换*ISP分配的IP地址是:211.82.220.80211.82.220.87211.82.220.81 255.255.255.248要求Intranet上的Web.E-mail.Ftp.Media可以被外部访问.Interface fastethernet0/0Ip address 192.168.1.1 255.255.255.0Duplex autoSpeed autoIp nat insideNo shutdownInt
6、erface fastethernet0/1Ip address 211.82.220.81 255.255.255.248Speed autoDuplex autoIp nat outsideNo shutdownIp nat pool Outpool 211.82.220.86 211.82.20.86 netmask 255.255.255.248Access-list 1 permit 192.168.1.2 0.0.0.255Access-list 1 permit 192.168.1.3 0.0.0.255Access-list 1 permit 192.168.1.4 0.0.0
7、.255Access-list 1 permit 192.168.1.5 0.0.0.255Ip nat inside source list1 pool Outpool overloadIp nat inside source static 192.168.1.2 211.82.220.82Ip nat inside source static 192.168.1.3 211.82.220.83Ip nat inside source static 192.168.1.4 211.82.220.84Ip nat inside source static 192.168.1.5 211.82.
8、220.85*NAT影射*如果ISP提供的IP地址比较多还可以,但如果不是的时候(如就两个时),一个用于内网地址转换,另一个用于对外网提供服务.ISP提供的内网上网IPInterface ethernet0Ip address 192.168.1.1 255.255.255.0Duplex autoSpeed autoIp nat inside No shutdown Interface fastethernet0/0Ip address 211.82.220.129 255.255.255.248Duplex autoSpeed autoIp nat outsideNo shutdownAc
9、cess-list 1 permit 192.168.1.0 0.0.0.255Ip nat pool Everybody 211.82.220.130 211.82.220.130 network 255.255.255.252Ip nat inside source list1 pool Everybody overloadIp nat inside source static tcp 192.168.1.2 80 202.99.220.130 80Ip nat inside source static tcp 192.168.1.3 21 202.99.220.130 21Ip nat
10、inside source static tcp 192.168.1.4 25 202.99.220.130 25Ip nat inside source static tcp 192.168.1.5 110 202.99.220.130 110*利用地址转换实现负载均衡*;当有如象腾讯公司似的多服务器时,使用路由器实现负载平衡,可以使它们有平等的访问机会.Interface fastethernet0/1 Ip address 192.168.1.1 255.255.255.0Duplex autoSpeed autoIp nat inside No shutdownInterface fa
11、stethernet0/0Ip address 202.110.198.81 255.2555.255.248Duplex autoSpeed autoIp nat outsideAccess-list 1 permit 202.110.198.82Access-list 2 permit 202.110.198.83Access-list 3 permit 192.168.1.0 0.0.0.255Ip nat pool Webser 192.168.1.2 192.168.1.3 255.255.255.248 type rotaryIp nat pool Ftpser 192.168.1.4 192.168.1.5 255.255.255.248 type rotaryIp nat pool normal 202.110.198.84 202.110.198.84 netmask 255.255.255.248Ip nat inside destination list 1 pool Webser Ip nat inside destination list 2 pool Ftpser
