NAT网络地址转化实验

实验内容及要求：

 

实验过程：

1、新建拓扑

 

2、给AR1\AR2配置IP地址

[Huawei]inter g0/0/0
[Huawei-GigabitEthernet0/0/0]ip add 192.168.1.1 24
Jul 14 2022 20:39:19-08:00 Huawei %%01IFNET/4/LINK_STATE(l)[0]:The line protocol
 IP on the interface GigabitEthernet0/0/0 has entered the UP state. 
[Huawei-GigabitEthernet0/0/0]
[Huawei-GigabitEthernet0/0/0]inter g0/0/1
[Huawei-GigabitEthernet0/0/1]ip add 12.1.1.1 24
Jul 14 2022 20:39:36-08:00 Huawei %%01IFNET/4/LINK_STATE(l)[1]:The line protocol
 IP on the interface GigabitEthernet0/0/1 has entered the UP state. 
[Huawei-GigabitEthernet0/0/1]quit
	

[r2]inter g0/0/0
[r2-GigabitEthernet0/0/0]ip add 12.1.1.2 24
[r2]inter g0/0/1
[r2-GigabitEthernet0/0/1]ip add 1.1.1.1 24
[r2-GigabitEthernet0/0/1]quit

 3、在AR1上写一条缺省路由

[Huawei]ip route-static 0.0.0.0 0 12.1.1.2

4、在AR1上进行“一对多”地址转换

[Huawei]acl 2000	
[Huawei-acl-basic-2000]rule permit source 192.168.1.0 0.0.0.255
[Huawei-acl-basic-2000]q
[Huawei]inter g0/0/1
[Huawei-GigabitEthernet0/0/1]nat o	
[Huawei-GigabitEthernet0/0/1]nat outbound 2000
[Huawei-GigabitEthernet0/0/1]quit 

5、测试

 

6、配置DNS

 

7、在路由器AR1的0/0/1端口上进行端口映射配置

[Huawei]inter g0/0/1
[Huawei-GigabitEthernet0/0/1]nat server protocol tcp global current-interface 80
 inside 192.168.1.3 80
Warning:The port 80 is well-known port. If you continue it may cause function fa
ilure.
Are you sure to continue?[Y/N]:y

 再次在路由器AR1的0/0/1端口上进行端口映射配置，且TCP端口号为8888

[Huawei-GigabitEthernet0/0/0]inter g0/0/1
[Huawei-GigabitEthernet0/0/1]nat server protocol tcp global current-interface 88
88 inside 192.168.1.4 80
[Huawei-GigabitEthernet0/0/1]q

8、测试（clientl1访问左边服务器） 

 

 

 实验结束