
路由器上作NAT,如下(1)配置Static NAT成功,可以ping and telnet from inside to outside。但是仅仅把Static NAT的命令换成PAT,如下(2),则"sh ip nat translation"的输出内容为空,好像PAT根本没起来。请问需要添加什么配置吗?
]1 V& b8 ^0 Z$ j( e; h W+ e$ I( _/ u% V8 u0 J
1) 路由器配置,使用Static NAT,可以ping and telnet from inside to outside:! i6 M# \0 R! e
interface Ethernet0/0$ j2 s- I; g. _2 y4 K. R. D
ip address 10.1.234.2 255.255.255.0
6 L3 A9 o* ~+ d) L* [- j ip nat inside. Q) k8 s/ g# S
!2 p! G; B' k3 O% H% B
interface Serial0/0
K. k8 C4 g* y+ D: q. `5 F0 c no ip address
7 X' B# g: Z' l0 ^ encapsulation frame-relay' Y/ U \% L9 |* ^
no arp frame-relay
4 I9 U" `& | l- x0 E9 g1 m, K5 r no frame-relay inverse-arp/ R6 i) R% ^+ l
!, `+ |; a f# @ g' K/ b
interface Serial0/0.12 point-to-point+ j, r- A" e( l' p
ip address 210.1.12.2 255.255.255.0
2 B9 p4 h9 p! y ip nat outside( F% S; e2 S8 Y9 h0 X
ip virtual-reassembly* {* j7 k4 @ b% v2 J' M: C! k
frame-relay interface-dlci 201
# O- n, p2 F, D( v( ^4 t!
7 n, n2 W& Z7 H5 h! ]2 oip nat inside source static 10.1.234.3 210.1.12.5
" i2 |2 F1 \; e8 H I% Z& ~% H% q! ^1 T4 M6 t9 F
2 X o3 K9 ~5 D+ `( @! [
2)其它配置不变,只是把以上“ip nat inside source static 10.1.234.3 210.1.12.5”命令替换为以下二条命令,sh ip nat translation命令的输出结果变成空的了:
' p& G5 v# p- S: |0 O' \6 D$ A5 aip nat inside source list 1 interface Serial0/0.12 overload/ y1 u3 m2 @; _' f, ~ k, r
!; ~2 N" J: |: v2 p- W- w4 B+ C
access-list 1 permit 10.1.234.0 0.0.0.255 log
0 W( W* l5 e- _/ Z# \!& q2 ^& C! x3 `, \0 s" B
9 U9 n4 g6 E( C; b7 K p
"sh ip nat translations"输出结果为空:
6 n7 Q2 q) J) B* J- y; l/ Cr2#sh ip nat translations
0 S8 `$ U5 ?& X3 x0 R( s, p
; G& X- X9 ~! H! {6 Ar2#
( V' y- T4 I( @! U) m5 i9 r
. ]& }$ r4 ^# F. ^4 @请教一下,PAT跟Static NAT相比,还有什么其它需要配置的命令吗?% J1 D ~$ ~* F5 J5 j! d
. [0 p8 M: i! Q/ q% Y; L4 V* ^
|
|