
我们正在实现的一个工程真实环境。一边为电信出口s1/0,一边为网通出口s1/1,缺省走电信,有二条明细走网通。(附图)
) [6 @; U8 z/ A* ~4 f) a9 G n3 g
2 W# h& D( [: A- k" h2、R1为企业双WAN口接入路由器,在上做两个出口的NAT。 7 a5 N9 i/ ~7 C3 ]) H
2 V: i" U' }) u$ H* T( B5 {
3、R2与R3为Internet部分,起动态路由协议,其中12.0.0.0/8应用重分发技术,以防止在R2的S1/0接口上产生不必要的网络流量。 2 a+ _/ @9 z* v3 O! G; |5 o
, |0 e; p$ h, l实验疑问: " D& ]' P1 P5 ^7 ]' R5 O7 t
) b& b/ W8 T6 T
此实验在Dynagen环境下,发现无法实现两个出口的NAT,单出口NAT一切正常,请问存在此问题的原因?如果能实现,请写出详细配置,我的R1详细配置附后,请指正,谢谢! 0 j' v2 c2 b" S+ T* F3 G
. o2 x( M/ |6 D$ s
' z0 D: ?( f* R+ J3 D2 z, d- yR1详细配置如下:
2 p7 c% _" q# X# z* _2 X2 E8 d5 [: @interface FastEthernet0/0" ?1 G/ w4 d: O* t+ c
: O4 ^9 e) ~! E% {$ N( Jip address 192.168.12.254 255.255.255.0
# m2 N: G- I" X6 q& q1 i5 M. Q+ f6 K/ O% U
no ip directed-broadcast
2 u+ N+ a/ L( M* u' x1 h* L( E
, x d( Z+ M# K5 p2 Z/ L3 m: |3 Nip nat inside6 [$ r: M( E/ T0 R. W
) B A+ N$ H5 G3 zduplex auto
5 A% |% F! R- [4 V* o; e
1 e, g+ a {9 c7 Kspeed auto! D3 u! q s2 O- L* {" E* _* q
!
* R/ ]4 n/ g( d; [interface Serial1/07 j, z. {4 A/ n/ q+ v
- `4 y$ _: Q( L3 j( }ip address 12.0.0.1 255.0.0.05 W5 ~" B% Z. V: V7 {
" s! K9 t9 G+ o' `8 S# v
no ip directed-broadcast
( M2 z. {9 e$ X
4 ]9 Z8 u7 U2 z2 y- W8 sip nat outside2 t; Z. Q. `4 ~! C$ U6 ^! D. O- y
!* D8 ?. b, v7 \3 s' {
interface Serial1/1
4 ^& n- D/ L/ r: L- h m
' T: Y& _4 T0 i) ^ip address 192.168.10.1 255.255.255.0
' h; d( ?! P8 t- s3 n) {) t4 Q3 t; j% ~& G& Z
no ip directed-broadcast$ F& O( ]( s3 G' |+ B/ q3 a
6 f* k, G* U' R1 N
ip nat outside
2 X2 s5 }- ]& }/ o6 B+ o. ?6 S!+ R6 U' f1 ]$ t9 g1 r/ J
interface Serial1/2( a( Z8 K6 ]7 ?1 U# O1 i7 L% p
/ e% l% b5 Z4 ]- Mno ip address
, e* h S' P9 X5 ]! B' x+ S4 B* p/ | N: \
no ip directed-broadcast
. k, p6 a) w4 s* k2 o6 o4 a7 Y3 q/ q+ S0 [/ f
shutdown
) `7 j( T+ w' U' g% |- s2 z! U
. w; K! Q9 Q' w; {4 O/ R* Gclockrate 2015232
. ?/ N" B- I$ }% N( s- D!
, k$ q/ D/ j; ?interface Serial1/3
9 U& M% ~# f8 t
, g7 f5 c; d3 U6 Mno ip address
, t; q) x8 s0 J2 ~
# S* l3 \* k6 H2 L. Z% Xno ip directed-broadcast1 H0 B! N0 {1 e" ~6 p4 n
* m. a5 W8 B5 }
shutdown2 f9 K2 p0 x' y
0 B. d* f% |1 k, P5 W& V6 M7 o9 a: g2 vclockrate 2015232
- S" Z# l/ e% K* X& e!
! g! v. h8 c8 U. m' {7 `ip nat inside source list 1 interface Serial1/0 overload/ i1 ?1 ]+ r0 l* C& [) ^$ i0 N
ip nat inside source list 2 interface Serial1/1 overload( F& n$ d. n/ ~; O0 D
ip classless/ }& M3 G7 {" ~
ip route 0.0.0.0 0.0.0.0 Serial1/0! y0 I: b6 H) Y1 P( ~- T# t
ip route 40.0.0.0 255.0.0.0 Serial1/1$ s7 r' O: A, @. G, O; b* k3 m2 e8 ~8 \. n
ip route 50.0.0.0 255.0.0.0 Serial1/1: ] Q+ g- j5 {* G$ ~
no ip http server
: r1 u- a' b7 E+ B1 a: C2 @!
; u# z4 X& D5 Q$ Y8 o& X. Uaccess-list 1 permit any0 L. {0 g6 j9 T) i& Z/ G% |5 I
access-list 2 permit any
8 P' P5 z3 t- s2 W |
|