NAT动态配置将内部地址192.168.100.2~192.168.100.54转换为合法地址61.159.62.131~61.159.62.190，以便访问Internet定义访问控制列表：rout
.
NAT动态配置
将内部地址192.168.100.2~192.168.100.54转换为合法地址61.159.62.131~61.159.62.190，以便访问Internet
定义访问控制列表：
router(confi)#access-list 1 permit 192.168.100.0 0.0.0.255定义合法IP地址池：
router(config)#ip nat pool test0 61.159.62.131 61.159.62.190 netmask 255.255.255.192实现网络地址转换：
router(config)#ip nat inside source list 1 pool test0在内部和外部端口上启用NAT，以及配置默认路由：与静态NAT配置相同
Demo3：动态NAT
sw：
sw#conf t sw(config)#no ip routing sw(config)#int f1/0sw(config-if)#speed 100sw(config-if)#dup fullR1：
R1#conf tR1(config)#int f0/0R1(config-if)#ip add 192.168.100.1 255.255.255.0R1(config-if)#no shutR1(config-if)#int f0/1 R1(config-if)#ip add 12.0.0.1 255.255.255.0R1(config-if)#no shutR1(config-if)#exNAT动态地址转换配置：
R1:R1(config)#access-list 1 permit 192.168.100.0 0.0.0.255 //内部转化地址段落R1(config)#ip nat pool test 12.0.0.10 12.0.0.100 netmask 255.255.255.0//外部转换地址段落R1(config)#ip nat inside source list 1 pool test //引用地址池R1(config)#int f0/0R1(config-if)#ip nat insideR1(config-if)#int f0/1R1(config-if)#ip nat outsideR1(config-if)#end R1#debug ip natIP NAT debugging is on主机写IP地址：
PC1> ip 192.168.100.10 192.168.100.1 Checking for duplicate address...PC1 : 192.168.100.10 255.255.255.0 gateway 192.168.100.1PC2> ip 192.168.100.20 192.168.100.1Checking for duplicate address...PC1 : 192.168.100.20 255.255.255.0 gateway 192.168.100.1PC3> ip 12.0.0.12 12.0.0.1Checking for duplicate address...PC1 : 12.0.0.12 255.255.255.0 gateway 12.0.0.1地址是否转换成功测试：
PC1> ping 12.0.0.12 -t 12.0.0.12 icmp_seq=1 timeout84 bytes from 12.0.0.12 icmp_seq=2 ttl=63 time=50.159 ms84 bytes from 12.0.0.12 icmp_seq=3 ttl=63 time=31.241 ms84 bytes from 12.0.0.12 icmp_seq=4 ttl=63 time=35.309 ms84 bytes from 12.0.0.12 icmp_seq=5 ttl=63 time=37.707 ms*Mar 1 00:16:43.395: NAT: s=192.168.100.10->12.0.0.10, d=12.0.0.12 [13566]//地址转换成功PC2> ping 12.0.0.12 -t 84 bytes from 12.0.0.12 icmp_seq=1 ttl=63 time=19.590 ms84 bytes from 12.0.0.12 icmp_seq=2 ttl=63 time=23.424 ms84 bytes from 12.0.0.12 icmp_seq=3 ttl=63 time=27.049 ms*Mar 1 00:19:10.567: NAT*: s=192.168.100.20->12.0.0.11, d=12.0.0.12 [13713]//另外一个地址也转换成功