Network Security Internet Technology Development Database Servers Mobile Phone Android Software Apple Software Computer Software News IT Information

In addition to Weibo, there is also WeChat

Please pay attention

WeChat public account

Shulou

NAT list dynamic configuration experiment

2025-02-24 Update From: SLTechnology News&Howtos shulou NAV: SLTechnology News&Howtos > Servers >

Share

Shulou(Shulou.com)06/02 Report--

I. Experimental configuration diagram

1. Set up layer 3 switch sw

Sw#conf t Enter configuration commands, one per line. End with CNTL/Z.sw (config) # no ip routing sw (config) #

2. Set up routing R1

R1#conf t Enter configuration commands, one per line. End with CNTL/Z.R1 (config) # int f 0/1R1 (config-if) # ip add 192.168.20.1 255.255.255.0 / / only set the IP address and subnet mask R1 (config-if) # no shut * Mar 1 0000 0/1R1 54.063:% LINK-3-UPDOWN: Interface FastEthernet0/1, changed state to up*Mar 1 0015 063:% LINEPROTO-5-UPDOWN: Line protocol on Interface FastEthernet0/1 Changed state to upR1 (config-if) # int f 0/0R1 (config-if) # ip add 192.168.100.1 255.255.255.0 / / only set the IP address and subnet mask R1 (config-if) # no shut R1 (config-if) # ex * Mar: 08.423:% LINK-3-UPDOWN: Interface FastEthernet0/0, changed state to up*Mar 100: 01VR 09.423:% LINEPROTO-5-UPDOWN: Line protocol on Interface FastEthernet0/0 Changed state to upR1 (config) #

3. Set up three PCs

PC1PC1 > PC1 > ip 192.168.20.20 192.168.20.1Checking for duplicate address...PC1: 192.168.20.20 255.255.255.0 gateway 192.168.20.1PC1 > PC2PC2 > PC2 > ip 192.168.20.30 192.168.20.1Checking for duplicate address...PC1: 192.168.20.30 255.255.255.0 gateway 192.168.20.1PC2 > PC3PC3 > PC3 > ip 192.168.100.10 192.168.100.1Checking for duplicate address...PC1: 192 .168.100.10 255.255.255.0 gateway 192.168.100.1

Note: at this time, it is theoretically possible to interoperate the whole network. no, no, no.

4. Configure dynamic NAT list on R1

R1 (config) # R1 (config) # ip access-list standard kgc / / set the named access control list R1 (config-std-nacl) # permit 192.168.20.0 0.0.255 R1 (config) # ip nat pool test 12.0.10 12.0.20 netmask 255.255.255.0 / set up the public network address pool R1 (config) # * Mar 1 00:09: 46.123:% LINEPROTO-5-UPDOWN: Line protocol on Interface NVI0 Changed state to upR1 (config) # ip nat inside source list kgc pool test / / Network address Translation R1 (config) # int f0/1R1 (config-if) # ip nat inside / / enable Internal NATR1 (config-if) # int f0/0R1 (config-if) # ip nat outside / / enable external NATR1 (config-if) # ex

Verification result

The above is the address translation of dynamic NAT. There is no need to specify the translation address manually, and the address within the range can be translated automatically.

Welcome to subscribe "Shulou Technology Information " to get latest news, interesting things and hot topics in the IT industry, and controls the hottest and latest Internet news, technology news and IT industry trends.

Views: 0

*The comments in the above article only represent the author's personal views and do not represent the views and positions of this website. If you have more insights, please feel free to contribute and share.

Share To

Wechat

© 2024 shulou.com SLNews company. All rights reserved.

12
Report