思科路由器配置方法普通nat和普通vlan

《思科路由器配置方法普通nat和普通vlan》由会员上传分享，免费在线阅读，更多相关内容在教育资源-天天文库。

1、思科路由器配置方法普通NAT和普通VLAN思科路由器NAT配置(1)企业边缘路由器配置端口配置conftintfa0/0ipadd218.1.1.1255.255.255.252ipnatoutsidenoshintfa0/1ipadd192.168.0.1255.255.255.252ipnatinsidenoshexitipnatpoolNAT-POOL218.1.1.1218.1.1.1netmask255.255.255.252access-list10per192.168.0.00.0.255.255ipnatinsidesourcelist1poolNAT-POOLov

2、erload静态路由iproute0.0.0.00.0.0.0218.1.1.2iproute192.168.0.0255.255.0.0192.168.0.2静态端口映射ipnatinsidesourcestatictcp192.168.0.222218.1.1.12222查看与排错shipnattranslationsdebugipnatAAA配置conftaaanew-modelaaaauthelogindelocaluseradminpassciscoenseccisco阻止总外部telnet进路由器linevty04access-class10in下联交换机配置端口配置c

3、onftintfa0/0noswipadd192.168.0.2255.255.255.252noshSSH配置conftipdomain-nametest.comcryptokeygeneratersaAAA配置conftaaanew-modelaaaauthelogindeflocaluseradminpassciscoensecciscoexit通过以上配置从外部不能直接telnet进路由器可以通过ssh登录下层交换机实现了远程管理的同时增加了安全性实验机器为cisco3640cisco3550over.....***********************动态地址转换+端口

4、***********************ISP分配的IP有:202.99.160.130~190255.255.255.192Interfacefastethernet0/1Ipaddress192.168.1.1255.255.255.0Ipaddress192.168.2.1255.255.255.0secondaryDuplexautoSpeedautoIpnatinsideNoshutdownInterfaceserial0/0Ipaddress202.99.160.129255.255.255.192DuplexautoSpeedautoIpnatoutsideNo

5、shutdwonIpnatpoolOutPort202.99.160.190202.99.160.190netmask255.255.255.192IpnatpoolOutPool202.99.160.130202.99.160.190netmask255.255.255.192Ipnatinsidesourcelist1poolOutPort//192.168.1.0段主机全部转成202.99.160.190Ipnatinsidesourcelist2poolOutPool//出于访问ftp站点等考虑:192.168.2.0和192.168.3.0段主机全部//转成202.99.

6、160.130到202.99.160.189中的所有地址。Access-list1permit192.168.1.00.0.0.255Access-list2permit192.168.2.00.0.0.255Access-list2permit192.168.3.00.0.0.255***********************静态地址转换***********************ISP分配的IP地址是:211.82.220.80~211.82.220.87211.82.220.81255.255.255.248要求Intranet上的Web.E-mail.Ftp.Media

7、可以被外部访问.Interfacefastethernet0/0Ipaddress192.168.1.1255.255.255.0DuplexautoSpeedautoIpnatinsideNoshutdownInterfacefastethernet0/1Ipaddress211.82.220.81255.255.255.248SpeedautoDuplexautoIpnatoutsideNoshutdownIpnatpoolOutpool211.82.220.86