nat配置（国外英文资料）.doc

nat配置（国外英文资料） Ethernet0 is connected to the internal network, while Ethernet1 is connected to a LAN segment. The company shares the segment with its ISPs router. Within the internal network, the company USES the address in the 10.0.0.0/24 address space. The company offers itself an IP address or 171.100.1.0/24. Company 171.100.1.1 router interface using IP address, and use the IP address 171.100.1.2 ISP router interface, while those from 171.100.1.0/24 began to address the rest is left to NAT translation. Companies want to use the necessary command on a router, in order to make its internal users can use the address space of the ISP provided the effective, globally routable address, in order to access the Internet. 1 solution Interface ethernet0 IP address 10.1.1.1 255.255.255.0 IP NAT inside ! Interface Ethernet1 IP address 171.100.1.1 255.255.255.0 IP NAT outside ! IP access - list 1, permit 10.0.0.255.255.255 ! The IP NAT pool Internet was 171.100.1.3 171.100.1.255.255.255.0 ! IP NAT inside source list 1 pool Internet 2 analysis The interface for NAT is defined in the schema. By placing the corresponding commands below each interface, specify that the interface is a NAT external interface or internal interface. This is the first step in configuring NAT. NAT does not work correctly if the user does not specify the interface to be either a NAT internal or NAT external interface, or if it is not specified correctly. If you dont define the NAT interface, NAT doesnt work at all, and the debug IP NAT detail command doesnt output any results. If the reader has defined all the other NAT commands, but NAT still does not work, make sure that the NAT command below each interface is reasonable. With the appropriate NAT command defined below each interface, you can define the NAT pool that holds the internal global address. The initial IP address we defined was 171.100.1.3, and the end address was 171.100.1.254. We dont use.1 and.2 addresses because the addresses are used for