网络基本架购接上一篇：R1：fa 0/0 12.1.1.1/29, fa 1/0 192.160.1.254/24PC1:192.160.1.1/24,PC2:192.160.1.2/24R2：fa
.
网络基本架购接上一篇：
R1：fa 0/0 12.1.1.1/29, fa 1/0 192.160.1.254/24
PC1:192.160.1.1/24,PC2:192.160.1.2/24
R2：fa 0/0 12.1.1.2/29,fa 1/0 192.160.2.254/24
PC3:192.160.2.1/24
R1>enable
configure terminal
interface fa 0/0
no shutdown
ip address 12.1.1.1 255.255.255.248
interface fa 1/0
no shutdown
ip address 192.160.1.254 255.255.255.0
ip route 0.0.0.0 0.0.0.0 fa 0/0把所有对外出口甩给fa 0/0端口(静态路由）
R2>enable
configure terminal
interface fa 0/0
no shutdown
ip address 12.1.1.2 255.255.255.248
interface fa 1/0
no shutdown
ip address 192.160.2.254 255.255.255.0
R1>
access-list 1 permit 192.160.1.0 0.0.0.255标准ACL 1允许1.0网段通过路由表
ip nat inside source list 1 interface fa 0/0 overload启用ACL1内部源地址动态转换到路由器连接互联网的端口fa0/0,该命令最后加上的overload表示复用
interface fa 0/0
ip nat outside
interface fa 1/0
ip nat inside
end
show ip nat translations
发现全部用的R1的fa 0/0 12.1.1.1 访问外网。
Router#show ip nat translations
Pro Inside global Inside local Outside local Outside global
icmp 12.1.1.1:23 192.160.1.1:23 192.160.2.1:23 192.160.2.1:23
icmp 12.1.1.1:24 192.160.1.1:24 192.160.2.1:24 192.160.2.1:24
icmp 12.1.1.1:25 192.160.1.1:25 192.160.2.1:25 192.160.2.1:25
icmp 12.1.1.1:26 192.160.1.1:26 192.160.2.1:26 192.160.2.1:26
icmp 12.1.1.1:29 192.160.1.2:29 192.160.2.1:29 192.160.2.1:29
icmp 12.1.1.1:30 192.160.1.2:30 192.160.2.1:30 192.160.2.1:30
icmp 12.1.1.1:31 192.160.1.2:31 192.160.2.1:31 192.160.2.1:31
icmp 12.1.1.1:32 192.160.1.2:32 192.160.2.1:32 192.160.2.1:32
