华为动态NAT配置问题

更新时间2019-08-01 16:41:43

将内部网络10.1.1.0/24转换为公网地址200.1.1.1～200.1.1.10/28上网（访问Server3），并抓包分析

2）验证动态NAT是单向转换

[SW1]vlan 10

[SW1-vlan10]quit

[SW1]port-group group-member e0/0/1 e0/0/2 e0/0/3 e0/0/4

[SW1-port-group]port default vlan 10

[SW1-port-group]quit

[SW1]interface GigabitEthernet0/0/1

[SW1-GigabitEthernet0/0/1]port link-type trunk

[SW1-GigabitEthernet0/0/1]port trunk allow-pass vlan all

[SW1-GigabitEthernet0/0/1]quit

[SW1]

 

[R1]interface GigabitEthernet0/0/0

[R1-GigabitEthernet0/0/0]ip address 10.1.1.254 24

[R1-GigabitEthernet0/0/0]quit

[R1]interface GigabitEthernet0/0/1

[R1-GigabitEthernet0/0/1]ip address 100.1.1.254 24

[R1-GigabitEthernet0/0/1]quit

[R1]interface GigabitEthernet0/0/2

[R1-GigabitEthernet0/0/2]ip address 200.1.1.254 24

[R1-GigabitEthernet0/0/2]quit

[R1]

 

[R1]acl 2000

[R1-acl-basic-2000]rule 5 permit source 10.1.1.0 0.0.0.255

[R1-acl-basic-2000]quit

[R1]nat address-group 1 200.1.1.1 200.1.1.10

[R1]interface GigabitEthernet0/0/2

[R1-GigabitEthernet0/0/2] nat outbound 2000 address-group 1 no-pat

[R1-GigabitEthernet0/0/2]quit

[R1]dis nat outbound

pc1ping不通server3，帮忙看看少了哪一步啊

华为

厉害，但是还是不懂

相关标签:华为，配置