Steps for NAT configuration
The configuration steps are as follows:
NAT configuration idea:
2.1. Configure company intranet @ Configure terminal equipmentbr/>@ Configure terminal equipment
@ Configure Network Devicesbr/>#Gateway IP Address
@ Configure network devices
Create VLAN
- Configuration interface
#router
- Configure the interface IP address;
- Configure default routes to external networks;
- Configure NAT ;2. Configure the company's external network
@ Configure serverbr/>2. Configure the company's external network
@ Configure Server
#Gateway IP Address @ Configure Router br/>@ Configure Router
#Never configure any routing;
3. verification and testing
Configuration command: 1.PC-1: 10.1.1.1 255.255.255.0 10.1.1.254 SW: undo terminal monitor system-view sysname SW vlan 10 -> Create VLAN ; quit interface gi0/0/1 --> Interface to PC-1; port link-type access port default vlan 10 quit interface gi0/0/2 --> Interface to R1; port link-type access port default vlan 10 quit R1: undo terminal monitor system-view sysname R1 interface gi0/0/0 -> Interface to connect to intranet; ip address 10.1.1.254 24 quit interface gi0/0/1 -> Interface to connect to external network (interface is public network IP address) ip address 110.1.1.1 24 quit Configure default routes to external networks: ip route-static 0.0.0.0 0.0.0.0 110.1.1.2 The next configuration is NAT configuration command: [Key Command] interface gi0/0/1 -> Outgoing interface of data packet; nat static global 110.1.1.10 inside 10.1.1.1 Command explanation: As the interface sends packets out, If the source IP address is 10.1.1.1, Then translate the source IP address to: 110.1.1.10 2. Server-1： 200.1.1.1 255.255.255.0 200.1.1.254 R2: undo terminal monitor system-view sysname R2 interface gi0/0/0 ip address 200.1.1.254 24 quit interface gi0/0/1 ip address 110.1.1.2 24 quit 3. Verification and testing 1. Before NAT commands are configured on R1: PC-1 pings Server-1, but it doesn't work. The reasons are: R2 does not have a route back to 10.1.1.1; 2. After configuring NAT commands on R1: PC-1 to ping Server-1, interworking; The reasons are: The data packets sent by R1 are seen by the external network device. The source IP address of, changed to 110.1.1.10;
