
我们正在实现的一个工程真实环境。一边为电信出口s1/0,一边为网通出口s1/1,缺省走电信,有二条明细走网通。(附图) " r; ^ D& v6 k0 y" G* x
# x T W, L9 e7 Q. n( {2、R1为企业双WAN口接入路由器,在上做两个出口的NAT。
L$ j, S* [3 I$ x - K# ]' G0 Q3 L2 B; Z9 S
3、R2与R3为Internet部分,起动态路由协议,其中12.0.0.0/8应用重分发技术,以防止在R2的S1/0接口上产生不必要的网络流量。 - S( `# F7 Q! o/ [& t5 ?. g
- ?( @" o1 I/ D
实验疑问: ( \% U! V8 C! x" ~0 r5 d0 G2 F3 @' a
6 H0 F0 [( O$ f' g5 ]$ K5 Y
此实验在Dynagen环境下,发现无法实现两个出口的NAT,单出口NAT一切正常,请问存在此问题的原因?如果能实现,请写出详细配置,我的R1详细配置附后,请指正,谢谢! # P' Z: M7 I6 X5 c6 r
' o3 C( Z7 e( U5 }) R3 m
) j* [9 F* A% C7 V# GR1详细配置如下:3 K) }, ]. v t2 P$ {
interface FastEthernet0/0
; t8 Y5 ]; Z: u. M# W
/ B6 h( l) W2 `4 p9 eip address 192.168.12.254 255.255.255.0
3 C# [+ ]2 G9 F0 |: n$ @/ w& L S8 g; n# _! B
no ip directed-broadcast
. g9 j3 J! P9 W; Y2 B( v8 U! k9 B! S$ m& P/ U
ip nat inside o4 B7 B8 b2 H8 x$ j. u- B7 M
) m& l6 ~$ d+ G
duplex auto7 M, w6 z3 ^! V/ B' O: D2 v# a
: K( h- Y+ `; F2 ~7 ?3 V
speed auto0 W5 s- R5 h l/ s3 B# `
!6 P6 m3 ~, n, A, f1 C
interface Serial1/0% t+ S4 V2 J+ C- L. a8 f5 B
' u/ B% ?. w7 x' F- L; m6 H
ip address 12.0.0.1 255.0.0.0
6 ~; E' @0 Z* @& u
9 z9 q. j: ?' ~no ip directed-broadcast, t; ^* K7 x) A) O
9 s- @: |2 w) R4 \" y) pip nat outside
6 M a& o! w. p! Y7 }! U! E8 g2 u* T!
! @. ]0 R8 k0 X9 U# xinterface Serial1/1
, }1 }" `0 ^" E' I0 x; ~2 [2 _1 z4 _- ?2 n
ip address 192.168.10.1 255.255.255.07 [5 K, ~' o4 y& Y
2 c( C6 K/ V# R: r
no ip directed-broadcast( w0 Y6 l3 K& j' _) R1 S0 _
: Q" Y# y. P+ n( I; G0 ?" }ip nat outside/ M( y$ _9 C: K# Y
!
" F3 b. ?1 V0 d! uinterface Serial1/22 T8 C4 b( ?* X8 s6 g
; E0 K4 {. ~" r
no ip address
7 ]$ T8 ~! B% m2 I9 A' t
" r) @; m9 l9 a9 ]+ dno ip directed-broadcast' Z2 R/ _/ [3 l+ x6 C
6 s# i) ~: K. K
shutdown
$ j3 ^9 V9 J' N2 V2 R. W, A) Z$ C% E, ~1 o
clockrate 20152329 K' W: }/ @ [* Q- {( M$ E
!/ o+ w8 [) ~; [1 _3 a! y
interface Serial1/35 x+ U* b5 b" _! q
9 G6 o4 L! I& ]$ d5 qno ip address3 d/ y5 u5 D: D- q2 r9 a* J2 W
1 t9 P0 K/ J+ Z$ ] S
no ip directed-broadcast9 f, m6 I( c1 M9 D! h5 [
0 H$ U& g& G8 g+ N* E! V: Rshutdown* q, J) w, L o
w) `( `0 P! E6 a' [
clockrate 2015232; ~9 l5 l1 o/ o& D7 F
!. N4 k' H* L; c( y8 s
ip nat inside source list 1 interface Serial1/0 overload
3 h. L/ T/ B: ]3 g6 oip nat inside source list 2 interface Serial1/1 overload: J5 O- A" B, V
ip classless
, t- I4 U8 _" C: }& eip route 0.0.0.0 0.0.0.0 Serial1/09 ~7 _! W& U. m( s% f8 m, O
ip route 40.0.0.0 255.0.0.0 Serial1/1
9 O# |& R# \ @ip route 50.0.0.0 255.0.0.0 Serial1/1
" q* P7 a. E. W* Lno ip http server1 ~4 b' v) Q6 r4 t C( ~( ]# @
!
& b' Y2 S, k8 t: M b! f7 J/ laccess-list 1 permit any3 Z, d4 L2 f; p7 @; f6 h
access-list 2 permit any* F% n" N2 a7 f. k6 G1 ^
|
|