PAT 无法访问 ISP 路由器

网络工程 思科 路由 纳特 故障排除
2022-02-16 14:41:27

在此处输入图像描述 我刚刚在路由器中配置了 PAT,但它不起作用 ,,

我在 R1 中写了这个命令

    access-list 4 permit 172.16.0.0 0.0.255.255
    ip nat pool AdeNet 80.80.10.20 80.80.10.20 netmask 255.255.255.255
    ip nat inside source list 4 pool AdeNet overload

    int s0/0/0
ip address 172.16.15.21 255.255.255.252
    ip nat outside

    int s0/0/1
ip address 172.16.15.2 255.255.255.252
    ip nat inside

    int s0/1/0
ip address 172.16.15.10 255.255.255.252
    ip nat inside

    int s0/1/1
ip address 172.16.15.17 255.255.255.252
    ip nat inside

    int f0/0
ip address 172.16.0.150 255.255.248.0
    ip nat inside
    exit

这是ISP路由器的IP地址

int s0/0/0
ip address 172.16.15.22 255.255.255.252
int f0/0
ip address 10.10.1.1 255.255.0.0

80.80.10.20/32 是 NAT 的公共 IP 地址

这些是在 3 个路由器中执行 Show Run 命令的结果,希望对您有用

ISP

FastEthernet0/0        10.10.1.1/16

Serial0/0/0            172.16.15.22/30

==========================================

R1

interface FastEthernet0/0
 ip address 172.16.0.150 255.255.248.0
 ip nat inside

interface FastEthernet0/1
 no ip address

interface FastEthernet0/1.10
 encapsulation dot1Q 10
 ip address 192.168.1.10 255.255.255.0

interface FastEthernet0/1.20
 encapsulation dot1Q 20
 ip address 192.168.2.10 255.255.255.0

interface FastEthernet0/1.30
 encapsulation dot1Q 30
 ip address 192.168.3.10 255.255.255.0

interface FastEthernet0/1.40
 encapsulation dot1Q 40
 ip address 192.168.4.10 255.255.255.0

interface Serial0/0/0
 ip address 172.16.15.21 255.255.255.252
 ip nat outside
 clock rate 2000000

interface Serial0/0/1
 ip address 172.16.15.2 255.255.255.252
 ip nat inside
 clock rate 64000

interface Serial0/1/0
 ip address 172.16.15.10 255.255.255.252
 ip nat inside
 clock rate 64000

interface Serial0/1/1
 ip address 172.16.15.17 255.255.255.252
 ip nat inside
 clock rate 64000

router ospf 12

 network 172.16.0.0 0.0.7.255 area 0
 network 172.16.15.0 0.0.0.3 area 0
 network 172.16.15.8 0.0.0.3 area 0
 network 172.16.15.16 0.0.0.3 area 0
 network 172.16.15.20 0.0.0.3 area 0
 network 192.168.0.0 0.0.7.255 area 0
exit
ip nat pool AdeNet 80.80.10.20 80.80.10.20 netmask 255.255.255.255
ip nat inside source list 4 pool AdeNet overload
ip route 0.0.0.0 0.0.0.0 Serial0/0/0 
access-list 4 permit 172.16.0.0 0.0.255.255
access-list 4 permit 192.168.0.0 0.0.7.255

==========================

R2

interface FastEthernet0/0
 ip address 172.16.8.150 255.255.252.0

interface Serial0/0/0
 ip address 172.16.15.1 255.255.255.252
 clock rate 2000000

interface Serial0/0/1
 ip address 172.16.15.5 255.255.255.252
 clock rate 64000

router ospf 12
 passive-interface FastEthernet0/0
 network 172.16.8.0 0.0.3.255 area 0
 network 172.16.15.0 0.0.0.3 area 0
 network 172.16.15.4 0.0.0.3 area 0

我 ospf area 0 连接所有 WAN 网络并连接,

和 ISP 和 R1 路由器之间的静态路由和 ISP 和 R1 之间的默认路由

那么,是否缺少任何东西,阻止广域网连接互联网

2个回答

将 ISP 路由器上的静态路由更改为使用下一跳地址 172.16.15.21 而不是接口。

我在 R2 中编写了一个默认路由命令,它开始 ping 到 ISP 服务器,ip route 0.0.0.0 0.0.0.0 Serial0/0/0

可能我应该写在所有其他路由器,仍然不明白为什么!当我在路由器之间使用 OSPF 协议时,除了 ISP 路由器..