我碰到一个问题,做了一个NAT
8 S7 `; [7 [& c. k192.168.105.5
; ^ ^8 n; O' W3 F) Q7 a192.168.105.6
- u2 l S4 Z4 N ?192.168.105.7! D1 U6 R9 K5 }; _3 J3 d7 k
是内网的三台服务器5 o" M+ F y9 N
ip nat inside source list 99 inte**ce GigabitEthernet0/1 overload
' E, I/ Z% }3 y# Sip nat inside source static tcp 192.168.105.5 20 10.100.100.98 20 extendable
5 E/ A4 {4 x3 N( |$ [ip nat inside source static tcp 192.168.105.5 21 10.100.100.98 21 extendable 2 T+ c) D% K* h
ip nat inside source static tcp 192.168.105.5 22 10.100.100.98 22 extendable 7 {9 j8 d0 l/ \) i8 q2 o; U8 j
ip nat inside source static tcp 192.168.105.5 80 10.100.100.98 80 extendable
4 _9 t3 z2 d* M. F9 Lip nat inside source static tcp 192.168.105.5 443 10.100.100.98 443 extendable
3 s% W3 z2 E" k( dip nat inside source static tcp 192.168.105.5 1935 10.100.100.98 1935 extendable
6 l! A7 K, e& [. \- pip nat inside source static tcp 192.168.105.5 8080 10.100.100.98 8080 extendable 8 ?- Y4 B( X) Q: T, s
ip nat inside source static tcp 192.168.105.5 19350 10.100.100.98 19350 extendable
& E" {. m! q/ f% m5 G" Kip nat inside source static tcp 192.168.105.6 20 10.100.100.99 20 extendable 2 g# a' s. u4 \& ~5 W
ip nat inside source static tcp 192.168.105.6 21 10.100.100.99 21 extendable
( F' b7 j+ W5 [* nip nat inside source static tcp 192.168.105.6 22 10.100.100.99 22 extendable 7 Z% H* p+ Y7 W8 s
ip nat inside source static tcp 192.168.105.6 80 10.100.100.99 80 extendable
0 p, n! g* M9 j8 ?7 [" dip nat inside source static tcp 192.168.105.6 443 10.100.100.99 443 extendable ( g* @5 ?6 `9 q4 v9 E
ip nat inside source static tcp 192.168.105.6 1935 10.100.100.99 1935 extendable
# i4 q! b8 _- dip nat inside source static tcp 192.168.105.6 8080 10.100.100.99 8080 extendable 0 ?- ?& B1 U5 w& D* ~
ip nat inside source static tcp 192.168.105.6 19350 10.100.100.99 19350 extendable 7 D& s# G4 H2 k, u6 G/ y% l
ip nat inside source static tcp 192.168.105.7 22 10.100.100.100 22 extendable
( u% J5 J7 _0 u$ i6 \( [# w' ^3 W3 Qip nat inside source static tcp 192.168.105.7 53 10.100.100.100 53 extendable
& B2 a3 z8 D. ^6 I7 Zip nat inside source static udp 192.168.105.7 53 10.100.100.100 53 extendable 3 S$ Z. }+ Q, b# w$ o8 u
!
_: K/ m. F8 c. R3 C1 Zip access-list extended en
: [( Z# Z4 `. M$ ~# }2 S7 i3 h& N8 [! * \& S: l e- J/ \- z2 {
access-list 99 permit 192.168.105.0 0.0.0.255 . p0 U1 T* c' P- ^
access-list 101 deny tcp any any eq 22 & p/ l# U- {2 ?4 s1 A( p7 J5 f
access-list 101 permit ip any any
5 b) |8 c* K& U& w0 c3 {- H
+ N1 N6 V0 k7 f0 a; |$ T0 c& u _' G! D
将22端口禁掉后,外网可以上内网的服务器,但是几个小时后就不能上了。
% z5 t& a! @) {5 j9 G
* P. r7 l. e9 z2 A+ \5 H" o高手以前有没有碰到过这种问题? |