2-07-01-scaling the network with nat and pat

《2-07-01-scaling the network with nat and pat》由会员上传分享，免费在线阅读，更多相关内容在教育资源-天天文库。

1、AddressSpaceManagementScalingtheNetworkwithNATandPATNetworkAddressTranslationAnIPaddressiseitherlocalorglobal.LocalIPv4addressesareseenintheinsidenetwork.GlobalIPv4addressesareseenintheoutsidenetwork.PortAddressTranslationTranslatingInsideSourceAddressesEs

2、tablishesstatictranslationbetweenaninsidelocaladdressandaninsideglobaladdressRouterX(config)#ipnatinsidesourcestaticlocal-ipglobal-ipMarkstheinterfaceasconnectedtotheinsideRouterX(config-if)#ipnatinsideMarkstheinterfaceasconnectedtotheoutsideRouterX(config-

3、if)#ipnatoutsideDisplaysactivetranslationsRouterX#showipnattranslationsConfiguringandVerifyingStaticTranslationEnablingStaticNATAddressMappingExampleRouterX#showipnattranslationsProInsideglobalInsidelocalOutsidelocalOutsideglobal---192.168.1.210.1.1.2----

4、--interfaces0ipaddress192.168.1.1255.255.255.0ipnatoutside!interfacee0ipaddress10.1.1.1255.255.255.0ipnatinside!ipnatinsidesourcestatic10.1.1.2192.168.1.2Establishesdynamicsourcetranslation,specifyingtheACLthatwasdefinedinthepreviousstepRouterX(config)#ipn

5、atinsidesourcelistaccess-list-numberpoolnameDefinesapoolofglobaladdressestobeallocatedasneededRouterX(config)#ipnatpoolnamestart-ipend-ip{netmasknetmask

6、prefix-lengthprefix-length}DefinesastandardIPACLpermittingthoseinsidelocaladdressesthataretobetranslate

7、dRouterX(config)#access-listaccess-list-numberpermitsource[source-wildcard]DisplaysactivetranslationsRouterX#showipnattranslationsConfiguringandVerifyingDynamicTranslationDynamicAddressTranslationExampleRouterX#showipnattranslationsProInsideglobalInsideloca

8、lOutsidelocalOutsideglobal---171.69.233.209192.168.1.100---------171.69.233.210192.168.1.101------OverloadinganInsideGlobalAddressConfiguringOverloadingEstablishesdynamicsourcetranslation,specifyingtheACLthatwasdefinedinthepreviousstepRouterX(config)#ipna

9、tinsidesourcelistaccess-list-numberinterfaceinterfaceoverloadDefinesastandardIPACLthatwillpermittheinsidelocaladdressesthataretobetranslatedRouterX(config)#access-listaccess-list-numberpermitsourcesou