01.使用NAT和PAT.ppt

管理地址空间 使用 NAT 和 PAT 扩展网络 NAT PAT 转换内部源地址 配置和检查静态内部源地址转换 静态地址转换示例 配置和检查动态地址转换 动态地址转换示例 重载内部全局地址 配置重载内部全局地址 重载内部全局地址转换示例 清除 NAT 转换条目 Translation Not Occurring:Translation Not Installed in the Table Verify that: There are no inbound ACLs that are denying the packets entry to the NAT router The ACL referenced by the NAT command is permitting all necessary networks There are enough addresses in the NAT pool The router interfaces are appropriately defined as NAT inside or NAT outside Displaying Information with show and debug Commands Translation Occurring: Installed Translation Entry Not Being Used Verify: What the NAT configuration is supposed to accomplish That the NAT entry exists in the translation table and that it is accurate That the translation is actually taking place by monitoring the NAT process or statistics That the NAT router has the appropriate route in the routing table if the packet is going from inside to outside That all necessary routers have a return route back to the translated address Sample Problem: Cannot Ping Remote Host Sample Problem: Cannot Ping Remote Host (Cont.) Sample Problem: Cannot Ping Remote Host (Cont.) Sample Problem: Cannot Ping Remote Host (Cont.) Sample Problem: Cannot Ping Remote Host (Cont.) Sample Problem: Cannot Ping Remote Host (Cont.) Sample Problem: Cannot Ping Remote Host (Cont.) Solution: Corrected Configuration Visual Objective 7-1: Configuring NAT and PAT Summary There are three types of NAT: static, dynamic, andoverloading (PAT). Static NAT is one-to-one address mapping. Dynamic NAT addresses are picked from a pool. NAT overloading (PAT) allows you to map many inside addresses to one outside address. Use the show ip nat translation command to display the translation table and verify that translation has occurred. To determine if a current translation entry is being used, use the show ip nat statistics command to check the hits counter. 端口号16位,最多65535个不同的私有地址转换成同一个公共地址. ? 2007 Cisco Systems, Inc. Al