网络设计与管理实践F.ppt

网络设计与管理实践F 静态路由与网络地址转换 nikinana@ourcnu.net 静态路由 路由表操作 查看路由表 Router#show ip route 添加静态路由 R1(config)#ip route 172.16.2.0 255.255.255.0 10.10.10.2 R2(config)#ip route 172.16.1.0 255.255.255.0 10.10.10.1 删除静态路由 R1(config)#ip route 172.16.2.0 255.255.255.0 R2(config)#ip route 172.16.2.0 255.255.255.0 静态路由 默认路由 R1(config)#ip route 0.0.0.0 0.0.0.0 10.10.10.2 R2(config)#ip route 0.0.0.0 0.0.0.0 10.10.10.1 网络地址转换 网络地址转换NAT Inside addressing Outside addressing Interface Configuration ip nat { inside | outside } 标记接口是内部还是外部 Defining a pool ip nat pool name start-ip end-ip { netmask netmask | prefix-length prefix-length } [ type { rotary } ] 定一个地址池 Defining ACLs access-list 1 permit 192.168.1.0 0.0.0.255 access-list 1 permit 192.168.2.0 0.0.0.255 Enabling translation of inside source addresses ip nat inside source list acl pool name [overload] ip nat inside source static local-ipglobal-ip Enabling translation of inside destination addresses ip nat inside destination list acl pool name ip nat inside destination static global-ip local-ip Enabling translation of outside source addresses ip nat outside source list acl pool name ip nat outside source static global-ip local-ip } Configuring translation timeouts ip nat translation timeout seconds ip nat translation udp-timeout seconds ip nat translation dns-timeout seconds ip nat translation tcp-timeout seconds ip nat translation finrst-timeout seconds CONFIGURATION EXAMPLES translates between inside hosts addressed from either the 192.168.1.0 or 192.168.2.0 nets to the globally-unique 171.69.233.208/28 network. 内部 192.168.1.0或者192.168.2.0 外部171.69.233.208/28 CONFIGURATION EXAMPLES ip nat pool net-20 171.69.233.208 171.69.233.223 netmask 255.255.255.240 ip nat inside source list 1 pool net-20 ! interface Ethernet0 ip address 171.69.232.182 255.255.255.240 ip nat outside ! interface Ethernet1 ip address 192.168.1.94 255.255.255.0 ip nat inside ! access-list 1 permit 192.168.1.0 0.0.0.255 access-list 1 permit 19