NAT转换详细试验

1、VLAN2服务器区SW1VLAN3VLAN4/ 1Internet详细拓扑图:LrlfUtA 0 I1K L6d tO I需求描述要求公司内部服务器192.1682.2用静态NAT转换为 145*52.23.6将内部网络地址192.1683.0/24和19N16 &4E/24采用PAT 转换为合法的外部地址145-52-23,1145.52.23.5要求公司内部服务器192.168.2.2采用静态NAT转换为145.52.23.6,将内部网络地址 192.168.3.0/24,192.168.4.0/24 采用 NAT 转 换为合法的外部地址的范围为 145.52.23.1145.52.23.

2、5在各个路由器上做配置I IU Ul IU W L I I -if I |_/Z,*在各个交换机相连胡接口上做TRUNKI 9 9g AU Hi i *T o uf f fJnn? o o olwl踣Ma11 s SLS 右Winter f0/2iiticicJe trLink讦5禹毗世广*0/2L7：曲.4莒7：宠QTPJ-T只UNKPOfTTOhJ:Port FaO/5 has become dotlq 工runwl(conf 1 g-i f XI nt er fOyl5wl(confmode rrunk conf i q-i f j #rlCconfig)#do show ib inte

3、r br1H-”interfaceiP-AddressOK?Methodst atusPrecolFastEThe r2TQ/0IQ.0,0.1YESmanual叩UPLoopbacIkO192.1C8. 50.1T5manualLIPup4、I I U 1 C UCUUU I11马 i ia ucci i l ui icu u irisnow ip i nter ErinterfaceIp-AddressOK?MethodStatusPrcolFasr EthernenC/O10.0.0.2YESmanualupupFast Et her netl/0192.168.100.2YESmanu

4、al叩uprvwMi u i i 11 ic p. i iv u 亠冒sw/2 fcorirfi年0/0別2(onfi g-iniodu t广 sv/2 (conf 1 q-1f(onfigD#讪讥f 0/0 sv/3(conf 1 g-ifmode trtconflg-if#在三层交换机上做 VTP,然后创建VLAN,使之和其他交换机同步 VLAN営5(v 1p d&miiri beneTdri 2 tfu :VLAM00CI2 #vlan 3 ded:VLAM0003 #vlAri 4 ded:Thanglng vtp domain nane from null to benet/LAN

5、2 atwama: s-fld-Cvl an vlan 3 acName!5irfi(vlan/LAN 4 acName:帖hw vlanw brVLAMNamestatusports1d&fault且匚tlve?aO/l3 PaO/2Fa0/5s FaO/6Fa0/Q3 FaO/liFaO/13, FaOZ2VL ANO 0D2active3VLAN0003active4VLAN 0001active1002fddl-defaultn匚匸1QQ3x uken-ri ng-defaultderive1004fddl net -ciefaul tactive1005t r neT-defaulT

6、activeI TldlJ. UU JJ . 金二 T戶 J.5.s#show vlan-sw br_A . JUIIH I LJUI =U I I Ulll JHJR 2 LJI 匸wy julailVLANNameTat usPOrT51defaultactiveFaO/lPraO/2,Pa0/3, FaF0/5rFaO/C?FaO/7, FaF-aQ/5fFO/1Q.Fa0/11.FaQ/13,FaQ/14 + FaO/152VLAN0002active3VLAN0003active4VLAN0004active1002fddi-defaultactiveH宀2t cl严rbr 4 nm

7、r4rrF m il 1-t rf-i- *5 If/n把相应的接口加入VLAN5w2(conf ig2)鼻sw2(conf-iq-i卅 日q匚 牯 1 白门 2sw2Cconfl q-1f)#do show vl an-s*/ br53Cconflg)#intsw3(conf 1 g-ifacc vlan 3s w3 Cc onf i g-if5 冲 Iht 曲尸5(confi q-讦也w a产 才1?門 4sw3 C匚门fi g-if)#do/Ian_欄 br 在各个PC上配置，由于PC是路由器模拟的， 所以要关闭路由功能在三层交换机上配置 的默认网关VLAN地址，做各个PCan21.16

8、8.2.2an3192.168.3.254Jan41.168.4.2 54yes manual upY=s manual upyes manual upMw/LfmrvH -if*upuoupCI 5咕j I 1 I ll-LTI H I ?【 (configjno ip 匚outing (configj1nrer fu/uGipell_pcl(conf1gipcl(confng-1f)*1p add 192.166.2.3 255.255.255,0pcl(conf ig-lfno shutpeiCcorrFi g-if 5#Mar 1 00:12 :11 51； 3fLlhlK-3-UPD

9、OWTd: intarfa匚电 FastEthar门电 10/0, changed state upMar 1 00:12 ：12.515: SfiL 工忖 PROTO - 5 -u p down : Li ne protocol on inrerf aca PastCthai ex0/0, changed 戸tdtc； to up目垣默认网去为VLAN2的TF地址picL(corrf 1 g-if)#flp default-g 192.168. 2. 2 pcl(config)#do sno ip route Default gateway is2 r 2 pc2 (conf 1 gjj#n

10、o 1p raurlng pcJCconfigjinter fo/o pc2(config-if)*-ip add 19?.168.3.4 255,255* 2 55.0 pc2(confIg-lf)ikia shut ri168,3.2 54o o o Q 0 c c c c 匚 ccccc r3 3 3 3 3 Q c c CM pppppQy 9-9 90 -I ! -1- JI 11e社r f M- 4 d H1po p iri賈Milt 伽一|fO/Oadd 152=68ShuTde F a807： WlINK 3.4,5 255UrDOWN：丄5亿DIntcrfacQ 2怖廿 1D

11、i0：14： 5Qr EOT : XL TNEPHQTO-5-I IPDOWTd： L inBetO/Q, chanoeth i一门p3fconf1c-f)ckfdifltlar i s t tt her ret 0/01 changed s-atc t proCrr-ol on mterfacpEthernnrd ni FmrlCconf1qp criCconf igVdop ng 192,168. iO0,1ed ! pn ! y e !escape sequenJT N Jiid I ir I I l P i _li-a-r2(conf1grfdo ping 192.1&运.2.ged

12、f pn B. ye ! T s iescape sequence to abort.ing 5, 100-byte LOMP Echos to 192.18. 2.3, tirtieoirc is 2 seconds :r2*p1 ng L92.16S.3.4Type escape sequence to abort-Sending 5. lQO-byte IQIP Echos ro 152.168.3.4, fim&ouT is 2 secords:success ate 1 s 100 percent (5/5)f round-trip min/avg/max - 48/76/120 m

13、s r2*ping L92.U68.4.5Typa escape sequence to abort.sending 5, ICO-byte ICHP Echos ro 192.168.4.5, timeout Is 2 seconds: pcltconf i gji! do ping 192.168,3.4-911*58. 3.Af tincur ii 2 sacords : rojnc-trip min/avc/max = 52/G2/76 msrype escape squence to dLori:. sending 5， 100-byte ICMP Echos to .” ！ ！ ！

14、Succass -at耳60()/5pcl(ccnf i gWdo p-ing 12 . ICS,100,. 1Type escape sequence ro abort.sendlng 5, loo-byre 工sp ecPios1&.iqo, 1, ilrreout 1 $2 seconds:Ilionplteonfiqjdo pi ng 192.16S. 01Type实匚Send!ng 5, LOO-byte TCMP Echos ro 192-168.50.1, rlmeouii i i i iF厂(戶p气 rAtp 11 00 nprrpnr f1. rnunrl-rrln rnln

15、/Awn/rriat 1 nslde sour匚e H&t 1 pool yangun rCccnf 1 qP rat inside our匚电 list 1 pool yangiun overload r Cccnfi g;:r2CCOnrfig-ifz)#ip nat outsider2(conf 1 g-lfpointer fl/or2fconfia-1f5*10 nar inside做静态转换f f f f f f n n n n nInlki o o o cccccc2 2 2 2 2 2c- r r r r r r r制卅if开ifif 3* - -g g g g OJ gJI 1

16、 1p nar 1 nsi de source sratlc 192.168. 2. 3 14 S. 52.23- 5社口fO/D4X1 p nat our s 1 de/?电nt er fVO碾务器的HF地址個静态转换Jjfi p na.t i ns i da5聽nd现在通过各个 PC对R1的回环接口 PING然 后在再R2上用命令debug ip nat进行查看是否转换r2#debu IP NAT r2#*MarMarar 怖arQ dI ip natebugging is on75579915 05 T 0595066-78889 9 55555555 11111111 S8S88888

17、- 22222222 o o o o o o o oNAT* ； NAT* : NAT* :NAT* : NAT* : NAT*；NAT1； NAT* :S=192 + 1G3.2.3-14Sh 52.2盒 6 d=192.16S.50,1 s=i9iea. 5qtit d=i4 5.5乙 2乳 &-1眈玩艮 2川s=y. ilds-上.占一？丄也!：. 丄-丄人 5 ci=y2.丄ta. bo. x 5=192.168. 50.1, d=14 5. 52. 23. 6-192.168. 2.3 5-192,168.2.3-145.52. 23.6, d-192.168. 50.1 5-192

18、,18.50.1, d-145*52.23.6-192.168.2.3 5=192.163.?.3-14?.52.23.6, d=192.15S.50,1 =192,13. 5Q丄 d=14 5. 52. 2乳 6-192 T1G8, 2,350 15152 葺 卩可 旳r2# *Mar 刊网ar 用网ar wMar War Mar Mar 即nr *Mar *Mar *Mar1 01:29:13.0551 01:29:13.055H 01：M；im：LW1 01:29:13,1031 O1；Z9：13.1631 01:29:13.1671 01:29:13.1791 O1：2Q：13.1S31 01:25:13.2551 01:29:13*2551 01:29:13.275kMar 1 01:29:09.979: NAT*-5=L52.168.3.4-145.52-23.2, d=152.16B.50-1IOMar 1 01:29江0.007： NAT*5-3 9?. J 68. 50.1. l1-14 5. 52.2? -19? .168,3.410Mar 1 01:29:10.17: NAT*S-1?.16S.3.4-145* 52.23.2, J-1&2.168.50.1rmvPiar 1 01；E9；D2為；NAn5=1