HCIA--NAT实验

HCIA--NAT实验_第1张图片

1. 划分网段,配置接口IP地址,内网启用OSPF协议,并配置一对一的NAT:

AR1配置:
[Huawei]int g0/0/0
[Huawei-GigabitEthernet0/0/0]ip add 10.1.1.1 24
[Huawei-GigabitEthernet0/0/0]int g0/0/1
[Huawei-GigabitEthernet0/0/1]ip add 11.1.1.1 24
[Huawei]sys isp
[isp]telnet 11.1.1.3   #telnet登陆
AR2配置:
[Huawei]int g0/0/0
[Huawei-GigabitEthernet0/0/0]ip add 11.1.1.2 24 
[Huawei-GigabitEthernet0/0/0]int g0/0/1
[Huawei-GigabitEthernet0/0/1]ip add 12.1.1.1 24 
[Huawei-GigabitEthernet0/0/1]qu
[Huawei]ospf 100 router-id 1.1.1.1
[Huawei-ospf-100]area 0
[Huawei-ospf-100-area-0.0.0.0]network 12.1.1.1 0.0.0.0
[Huawei]ip route-static 0.0.0.0 0 11.1.1.1   #下放缺省
[Huawei]ospf 100
[Huawei-ospf-100]default-route-advertise 
[Huawei]int g0/0/0   #启用一对一的NAT 进行地址转换
[Huawei-GigabitEthernet0/0/0]nat static global 11.1.1.3 inside 192.168.1.2
[Huawei]int g0/0/0   #telnet转换,远程登陆
[Huawei-GigabitEthernet0/0/0]nat server protocol tcp global 11.1.1.3 telnet insi
de 23.1.1.2 telnet
AR3配置:
[Huawei]int g0/0/0
[Huawei-GigabitEthernet0/0/0]ip add 12.1.1.2 24
[Huawei-GigabitEthernet0/0/0]int g0/0/1
[Huawei-GigabitEthernet0/0/1]ip add 23.1.1.1 24
[Huawei-GigabitEthernet0/0/1]qu
[Huawei]ospf 100 router-id 3.3.3.3
[Huawei-ospf-100]area 0
[Huawei-ospf-100-area-0.0.0.0]network 0.0.0.0 255.255.255.255
AR4配置:
[Huawei]int g0/0/0
[Huawei-GigabitEthernet0/0/0]ip add 23.1.1.2 24 
[Huawei-GigabitEthernet0/0/0]int g0/0/1
[Huawei-GigabitEthernet0/0/1]ip add 192.168.1.1 24
[Huawei-GigabitEthernet0/0/1]qu
[Huawei]ospf 100 router-id 4.4.4.4
[Huawei-ospf-100]area 0
[Huawei-ospf-100-area-0.0.0.0]network 0.0.0.0 255.255.255.255
[Huawei]user-interface vty 0 4   #telnet转换,远程登陆
[Huawei-ui-vty0-4]authentication-mode password
Please configure the login password (maximum length 16):123

2. AR2启用一对一的NAT后,PC2 ping PC1结果:

HCIA--NAT实验_第2张图片

3. 多对多的NAT配置:

AR2配置多对多的NAT:
[Huawei]sys R2
[R2]acl 2000    #抓内网流量,内网里面所有设备都能上外网
[R2-acl-basic-2000]rule permit source any
[R2-acl-basic-2000]qu
[R2]nat address-group 1 11.1.1.4 11.1.1.5   #抓取公网地址
[R2]int g0/0/0   #acl抓取的私网地址转换成group1中的任一地址
[R2-GigabitEthernet0/0/0]nat outbound 2000 address-group 1
[R2]acl 2000   #补充:多对一easyNAT
[R2-acl-basic-2000]rule permit source any
[R2-acl-basic-2000]qu
[R2]int g0/0/0
[R2-GigabitEthernet0/0/0]nat outbound 2000
AR4开启DHCP:
[R4]dhcp enable 
[R4]ip pool 1
[R4-ip-pool-1]network 192.168.1.0 mask 255.255.255.0
[R4-ip-pool-1]gateway-list 192.168.1.1	
[R4-ip-pool-1]dns-list 8.8.8.8
[R4-ip-pool-1]qu
[R4]int g0/0/1
[R4-GigabitEthernet0/0/1]dhcp select global 

PC4 ping PC1结果:

HCIA--NAT实验_第3张图片

你可能感兴趣的:(网络,服务器,华为)