CCNA实验–NAT和PAT的配置3

会计考友

方法三：配置PAT
1 A4 |) @" Z" `0 N) F' jKC-R1(config)#access-list 100 permit ip 10.1.1.0 0.0.0.255 any #创建访问列表
5 u, Q+ h1 W- i3 x; kKC-R1(config)#ip nat inside source list 100 interface s1/0 overload #二者关联，地址重载
2 f/ W5 |, U! ]- vKC-R1(config)#exit
! l" k, l7 k( h6 R+ X/ d7 g; o8 ?测试
PC-1#ping 202.101.1.149
% t$ b+ Y: N% Y( ^6 H/ d" n" |% g5 VType escape sequence to abort.
Sending 5, 100-byte ICMP Echos to 202.101.1.149, timeout is 2 seconds:
( P* F9 o5 O* b# J1 o% n9 `!!!!!
" Y; P7 z" ]1 Y9 ~9 ^4 mSuccess rate is 100 percent (5/5), round-trip min/avg/max = 84/97/116 ms
* W% A& ?7 {4 q5 ?; N0 RPC-1#
PC-1#telnet 202.101.1.149
+ x; R1 V% G( a3 K" RTrying 202.101.1.149 … Open
Password required, but none set
) _& Z" [  Y$ n0 j  w# J[Connection to 202.101.1.149 closed by foreign host]
同样，PC-2也能到达。
在路由器KC-R1上
KC-R1#debug ip nat #查看翻译过程考试用书
! [& H) y. C; [! \! @  i2 `*Mar 1 00:19:32.843: NAT*: s=10.1.1.1->173.16.1.56, d=202.101.1.149 [46610]
, D6 m3 _# P7 M*Mar 1 00:19:32.847: NAT*: s=10.1.1.1->173.16.1.56, d=202.101.1.149 [46611]
*Mar 1 00:19:33.083: NAT*: s=202.101.1.149, d=173.16.1.56->10.1.1.1 [31823]
在路由器KC-R2上
0 ]* _6 l( Z' n1 Q6 Z/ T* eKC-R2#debug ip packet
*Mar 1 00:23:34.931: IP: tableid=0, s=173.16.1.56 (Serial1/0), d=202.101.1.149 (Loopback0), routed via RIB
4 d7 d1 O) P9 Z5 j0 S1 R* E4 L- @*Mar 1 00:23:34.935: IP: s=173.16.1.56 (Serial1/0), d=202.101.1.149, len 100, rcvd 4
' t9 z3 x7 r& v5 ~: M+ N$ @4 e*Mar 1 00:23:34.939: IP: tableid=0, s=202.101.1.149 (local), d=173.16.1.56 (Serial1/0), routed via FIB
OK，实验完成。