CCNA实验–NAT和PAT的配置

KC-R1(config)#access-list 100 permit ip 10.1.1.0 0.0.0.255 any #创建访问列表

KC-R1(config)#ip nat inside source list 100 interface s1/0 overload #二者关联，地址重载

KC-R1(config)#exit

测试

PC-1#ping 202.101.1.149

Type escape sequence to abort.

Sending 5, 100-byte ICMP Echos to 202.101.1.149, timeout is 2 seconds:

!!!!!

Success rate is 100 percent (5/5), round-trip min/avg/max = 84/97/116 ms

PC-1#

PC-1#telnet 202.101.1.149

Trying 202.101.1.149 … Open

Password required, but none set

[Connection to 202.101.1.149 closed by foreign host]

同样，PC-2也能到达。

在路由器KC-R1上

KC-R1#debug ip nat #查看翻译过程

*Mar 1 00:19:32.843: NAT*: s=10.1.1.1->173.16.1.56, d=202.101.1.149 [46610]

*Mar 1 00:19:32.847: NAT*: s=10.1.1.1->173.16.1.56, d=202.101.1.149 [46611]

*Mar 1 00:19:33.083: NAT*: s=202.101.1.149, d=173.16.1.56->10.1.1.1 [31823]

在路由器KC-R2上

KC-R2#debug ip packet

*Mar 1 00:23:34.931: IP: tableid=0, s=173.16.1.56 (Serial1/0), d=202.101.1.149 (Loopback0), routed via RIB

*Mar 1 00:23:34.935: IP: s=173.16.1.56 (Serial1/0), d=202.101.1.149, len 100, rcvd 4

*Mar 1 00:23:34.939: IP: tableid=0, s=202.101.1.149 (local), d=173.16.1.56 (Serial1/0), routed via FIB