NE80/NE40系列路由器NAT Server功能的配置—PAT方式

NE80/NE40系列路由器NAT Server

功能的配置—PAT方式

一、  组网需求：

通过对NE80/NE40系列路由器的NAT Server 功能的配置，使得外网（RTB模拟）用户可以访问内网的FTP服务器；实验用NE40的版本为5.30-0237.05.

二、  组网图：

 

 

三、  配置步骤：

1.      按照上图所示配置接路由器及PC的IP地址；

2.      配置NE40的NAT转换功能：

2.1 配置NAT地址池与NAT转换策略   

#                                                                           

 nat address-group 1 pat  1.1.1.3 1.1.1.10 mask 255.255.255.0 slot 6              

 nat-policy number 1 ip 1.1.1.2 nat address-group 1                            

 nat enable address-group 1  //该命令配置完成后会自动生成NULL路由   

#                                               

2.2 配置需要做NAT映射的流分类及动作                                                                       

acl number 10000                                                               

 rule ip source 192.168.1.0 0.0.0.255                                          

#                                                                              

traffic classifier 1                                                           

 if-match acl 10000                                                             

#                                                                              

traffic behavior 1                                                             

 nat policy master 1                                                            

#                                                                              

traffic policy 1                                                               

 classifier 1 behavior 1 precedence 0                                           

#  

2.3 在入接口使能NAT转换策略

#                                                                              

interface Ethernet2/0/2                                                        

 undo shutdown                                                                 

 ip address 192.168.1.1 255.255.255.0                                          

 traffic-policy 1 inbound                                                      

#

2.4 在出接口使能MAC地址解析功能

#                                                                               

interface Ethernet2/0/1                                                        

 nat match-host 1     

 undo shutdown    

 ip address 1.1.1.1 255.255.255.0                                              

#

2.5 全局模式使能策略

#

commit  traffic  policy

#

2.6 配置内网NAT Server的映射功能

#

nat server protocol tcp global 1.1.1.3 21 inside 192.168.1.2 21

#                                                                              

四、  配置关键点：

对于内网Server的映射功能分为pat和no-pat方式两种，本案例给出了前者的配置方式。Pat方即采用端口+IP的映射方式，内网服务器所对应的公网IP与其它公网IP处于同一个地址池中，例如：在本例中1.1.1.3与其它公网IP同在address-group 1中。