icg3000

配置过程：

<H3C>sys

[H3C]sysname SW1

[SW1]int gi 1/0/1

[SW1-GigabitEthernet1/0/1]port link-mode route

[SW1-GigabitEthernet1/0/1]description <connect to R1>

[SW1-GigabitEthernet1/0/1]ip address 10.0.0.1 30

[SW1-GigabitEthernet1/0/1]quit

[SW1]ip http enable

[SW1]ip https enable

[SW1]local-user admin

New local user added.

[SW1-luser-manage-admin]password simple admin

[SW1-luser-manage-admin]service-type http https

[SW1-luser-manage-admin]authorization-attribute user-role network-admin

[SW1-luser-manage-admin]quit

[SW1]ip route-static 0.0.0.0 0.0.0.0 10.0.0.2

R1:

<H3C>sys

[H3C]sysname R1

[R1]int gi 0/0

[R1-GigabitEthernet0/0]description <connect to SW1>

[R1-GigabitEthernet0/0]ip address 10.0.0.2 30

[R1-GigabitEthernet0/0]quit

NAT配置：

[R1]acl basic 2000

[R1-acl-ipv4-basic-2000]rule 0 permit source any

[R1-acl-ipv4-basic-2000]quit

[R1]int gi 0/1

[R1-GigabitEthernet0/1]description <connect to WAN>

[R1-GigabitEthernet0/1]ip address 192.168.200.254 24

[R1-GigabitEthernet0/1]nat outbound 2000

[R1-GigabitEthernet0/1]nat server protocol tcp global 192.168.200.102 80 inside 10.0.0.1 80

[R1-GigabitEthernet0/1]nat server protocol tcp global 192.168.200.102 443 inside 10.0.0.1 443

[R1-GigabitEthernet0/1]quit

[R1]ip route-static 0.0.0.0 0.0.0.0 192.168.200.1

外网终端填写IP地址：

在外网终端使用CMD，输入命令telnet 192.168.200.102 80，测试服务可达性：

打开浏览器，输入网址：https://192.168.200.102

输入用户名、密码，点击“登陆”

查看NAT会话情况及会话信息：

此外，手机也可登陆：

至此，NAT server映射的典型组网配置1已完成！