網絡地址轉換NAT （全）

靜態NAT

R1>enable

R1#config t

Enter configuration commands, one per line. End with CNTL/Z.

R1(config)#interface s1/0

R1(config-if)#ip address 202.108.0.1 255.255.255.248

R1(config-if)#encapsulation ppp                        \\接口封裝爲ppp

R1(config-if)#ip nat outside                           \\配置爲nat外部接口

R1(config-if)#no shutdown

R1(config)#interface f0/0

R1(config-if)#ip address 192.168.0.1 255.255.255.0

R1(config-if)#ip nat inside                             \\配置爲nat內部接口

R1(config-if)#no shutdown

R1(config-if)#exit

R1(config)#ip route 0.0.0.0 0.0.0.0 s1/0

R1(config)#ip nat inside source static 192.168.0.2 202.108.0.3    \\將內部地址轉化爲公網源地址

R1(config)#ip nat inside source static 192.168.0.3 202.108.0.4

R2>enable

R2#config t

Enter configuration commands, one per line. End with CNTL/Z.

R2(config)#interface s1/0

R2(config-if)#ip address 202.108.0.2 255.255.255.248

R2(config-if)#encapsulation ppp

R2(config-if)#ip nat outside

R2(config-if)#no shutdown

R2(config)#interface f0/0

R2(config-if)#ip address 10.0.0.1 255.255.255.0

R2(config-if)#ip nat inside

R2(config-if)#no shutdown

R2(config-if)#exit

R2(config)#ip route 0.0.0.0 0.0.0.0 s1/0

R2(config)#ip nat inside source static 10.0.0.2 202.108.0.5

R2(config)#ip nat inside source static 10.0.0.3 202.108.0.6

動態NAT

R1(config)#access-list 1 permit 192.168.0.0 0.0.0.255               \\配置ACL肯定容許轉換網段

R1(config)#ip nat pool eric 202.108.0.3 202.108.0.4 prefix-length 29 \\創建公網地址池

R1(config)#ip nat inside source list 1 pool eric                     \\進行轉換

PAT配置

R1(config)#access-list 1 permit 192.168.0.0 0.0.0.255              

R1(config)#ip nat pool eric 202.108.0.3 202.108.0.3 prefix-length 29

R1(config)#ip nat inside source list 1 pool eric overload           \\進行轉換並開啓端口pat

基於端口的PAT

R1(config)#access-list 1 permit 192.168.0.0 0.0.0.255

R1(config)#ip nat inside source list 1 interface serial 1/0 overload\\直接轉換到外部端口上並開啓pat