Configuration experiment of Network address Translation between single-arm routing and extended ACL and NAT
Configuration experiment of Network address Translation between single-arm routing and extended ACL and NAT
Environment description:
1. Using single-arm routing to realize the interconnection between C1 and C2
two。 Realize the interconnection of the whole network
3. Using the extended ACL, the host in network 192.168.10.0 is prohibited from ping the IP address of C3, and the host in network 192.168.20.0 is prohibited from accessing the web service of C3, while any other traffic is allowed.
4. Use PAT to convert the network 192.168.20.0 ax 24 to a legitimate external address 12.0.0.4 max 24 to access C3
5. Use dynamic NAT to convert the network 192.168.10.0Comp24 to a legitimate external address 12.0.0.3Unigram 24, and use NAT port mapping to enable its hosts to access the web server of C3 using port 8080 of the URL 13.0.0.3Comp24.
C3 has created the default home page index.html
Verify that each host enables the httpd service, shuts down the virtual machine's DHCP service, firewall (command is service iptables stop) and SELinux (command is setenforce 0)
Create a vlan10,vlan20 for SW and assign interfaces f1max 1 and f1max 2 to vlan10 and vlan20, respectively
Configure the rate, duplex, and Trunk links for the f1amp0 interface of SW
Configure the encapsulation structure of VLAN tags and the address of subinterfaces on R1
Verify the interconnection between C1 and C2
Assign IP addresses to all interfaces of R1, R2, and R3, and configure static routes to achieve interconnection of the entire network.
Verify the interconnection of the whole network
Configure extended ACL command on R1 to realize access control function
Verify configured access control
Set up PAT to convert the network 192.168.20.0ax 24 to a legitimate external address 12.0.0.4 max 24 to access C3
Test NAT and view the conversion process
Set up dynamic NAT to convert the network 192.168.10.0Comp24 to a legitimate external address of 12.0.0.3Comp24
Set the NAT port mapping so that its host accesses the web server of C3 using port 8080 of the URL 13.0.0.3Comp24.
The experiment is completed
