实验六NAT和ACL.doc

实验六、NAT和ACL 一、实验目的 1．从实验角度帮助理解、配置和监测NAT；2．掌握配置静态NAT的方法。ACL的配置命令，ACL语句的顺序，ACL在网络中的布置的位置，ACL在路由器接口上启用的方向。1.静态NAT要求实现内网IP地址（Inside Local Address）对外网IP地址（Inside Global Address）之间的一一映射, 以一对地址的静态映射进行配置；2.查看NAT的相关信息；3.监测IP地址的转换；测试内网和外网间的双向连通性。 （二）ACL ACL有3种（1）普通ACL列表，（2）扩展ACL列表，（3）名称ACL列表。标准访问控制列表 2.扩展ACL： 三、实验环境 瑞捷实验设备：路由器、二层交换机、计算机。 四、关键配置 （一）NAT 1． R1的配置过程 ?????int f0/0 ?????ip add ?????ip nat inside ?????no shut ?????int s0/0 ?????ip add ?????ip nat outside ?????no shut ?????ip nat inside source static ?????ip route ?????2．R2的配置过程?????int s0/0?????ip address ?????clock rate 64000 ?????no shut?????int f0/0?????ip address ?????no shut?????line vty 0 4 ?????pass cisco ?????int loopback0 ?????ip address ?????3．R3的配置过程?????int f0/0?????ip add ?????no shut?????line vty 0 4?????pass cisco?????no ip routing ?????ip default-gateway ?????4．查看和监测静态内部源地址转换?????ping ?????显示信息：?????Type escape sequence to abort.?????Sending 5, 100-byte ICMP Echos to , timeout is 2 seconds:?????!!!!!?????Success rate is 100 percent (5/5), round-trip min/avg/max = 180/181/184 ms?????ping ?????Protocol [ip]:?????Target IP address: ?????Repeat count [5]: 500?????Datagram size [100]:?????Timeout in seconds [2]:?????Extended commands [n]:?????Sweep range of sizes [n]:?????Type escape sequence to abort.?????Sending 500, 100-byte ICMP Echos to , timeout is 2 seconds:?????!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!?????!!!!!!!!!?????ping ?????显示信息：?????Type escape sequence to abort.?????Sending 5, 100-byte ICMP Echos to , timeout is 2 seconds:?????!!!!!?????Success rate is 100 percent (5/5), round-trip min/avg/max = 180/183/185 ms?????debug ip nat ?????显示信息： ?????IP NAT debugging is on?????R1#?????06:20:19: NAT*: s=, d=- [731]?????06:20:19: NAT*: s=-, d= [732]?????06:20:19: NAT*: s=, d=- [732]?????06:20:19: NAT*: s=-, d= [733]?????06:20:19: NAT*: s=, d=- [733]?????06:20:19: NAT*: s=-, d= [734]?????06: