CCNA实验–NAT和PAT的配置3

会计考友

方法三：配置PAT
. [! k5 |. L# z; R, G4 `7 U( TKC-R1(config)#access-list 100 permit ip 10.1.1.0 0.0.0.255 any #创建访问列表
/ m8 P, N3 j/ T) c4 WKC-R1(config)#ip nat inside source list 100 interface s1/0 overload #二者关联，地址重载
KC-R1(config)#exit
测试
* o. {- d% E' wPC-1#ping 202.101.1.149
. U: v" F) p( aType escape sequence to abort.
Sending 5, 100-byte ICMP Echos to 202.101.1.149, timeout is 2 seconds:
!!!!!
5 G- J; f2 |* h& |/ E% [1 X( m, @Success rate is 100 percent (5/5), round-trip min/avg/max = 84/97/116 ms
9 E8 z8 F  U+ j- c: ?  J, |' CPC-1#
/ V! F) y8 |0 P$ l! c( ^: W8 yPC-1#telnet 202.101.1.149
' n; m: ]1 X0 a- KTrying 202.101.1.149 … Open
Password required, but none set
( c( E; f) l; F" m# n9 q[Connection to 202.101.1.149 closed by foreign host]
同样，PC-2也能到达。
在路由器KC-R1上
6 S$ x* |' |: A- H5 zKC-R1#debug ip nat #查看翻译过程考试用书
! t" B; _! u7 s: n*Mar 1 00:19:32.843: NAT*: s=10.1.1.1->173.16.1.56, d=202.101.1.149 [46610]
$ @, w0 ]) u8 _( q*Mar 1 00:19:32.847: NAT*: s=10.1.1.1->173.16.1.56, d=202.101.1.149 [46611]
*Mar 1 00:19:33.083: NAT*: s=202.101.1.149, d=173.16.1.56->10.1.1.1 [31823]
) T2 t2 W& X7 v4 h3 y在路由器KC-R2上
* @& }/ J0 k) S/ k% c+ ?2 k4 M8 }KC-R2#debug ip packet
  Z1 V5 o# H/ C# o*Mar 1 00:23:34.931: IP: tableid=0, s=173.16.1.56 (Serial1/0), d=202.101.1.149 (Loopback0), routed via RIB
. }# n. T! G- ~" n*Mar 1 00:23:34.935: IP: s=173.16.1.56 (Serial1/0), d=202.101.1.149, len 100, rcvd 4
*Mar 1 00:23:34.939: IP: tableid=0, s=202.101.1.149 (local), d=173.16.1.56 (Serial1/0), routed via FIB
OK，实验完成。