我刚刚在路由器中配置了 PAT,但它不起作用 ,,
我在 R1 中写了这个命令
access-list 4 permit 172.16.0.0 0.0.255.255
ip nat pool AdeNet 80.80.10.20 80.80.10.20 netmask 255.255.255.255
ip nat inside source list 4 pool AdeNet overload
int s0/0/0
ip address 172.16.15.21 255.255.255.252
ip nat outside
int s0/0/1
ip address 172.16.15.2 255.255.255.252
ip nat inside
int s0/1/0
ip address 172.16.15.10 255.255.255.252
ip nat inside
int s0/1/1
ip address 172.16.15.17 255.255.255.252
ip nat inside
int f0/0
ip address 172.16.0.150 255.255.248.0
ip nat inside
exit
这是ISP路由器的IP地址
int s0/0/0
ip address 172.16.15.22 255.255.255.252
int f0/0
ip address 10.10.1.1 255.255.0.0
80.80.10.20/32 是 NAT 的公共 IP 地址
这些是在 3 个路由器中执行 Show Run 命令的结果,希望对您有用
ISP
FastEthernet0/0 10.10.1.1/16
Serial0/0/0 172.16.15.22/30
==========================================
R1
interface FastEthernet0/0
ip address 172.16.0.150 255.255.248.0
ip nat inside
interface FastEthernet0/1
no ip address
interface FastEthernet0/1.10
encapsulation dot1Q 10
ip address 192.168.1.10 255.255.255.0
interface FastEthernet0/1.20
encapsulation dot1Q 20
ip address 192.168.2.10 255.255.255.0
interface FastEthernet0/1.30
encapsulation dot1Q 30
ip address 192.168.3.10 255.255.255.0
interface FastEthernet0/1.40
encapsulation dot1Q 40
ip address 192.168.4.10 255.255.255.0
interface Serial0/0/0
ip address 172.16.15.21 255.255.255.252
ip nat outside
clock rate 2000000
interface Serial0/0/1
ip address 172.16.15.2 255.255.255.252
ip nat inside
clock rate 64000
interface Serial0/1/0
ip address 172.16.15.10 255.255.255.252
ip nat inside
clock rate 64000
interface Serial0/1/1
ip address 172.16.15.17 255.255.255.252
ip nat inside
clock rate 64000
router ospf 12
network 172.16.0.0 0.0.7.255 area 0
network 172.16.15.0 0.0.0.3 area 0
network 172.16.15.8 0.0.0.3 area 0
network 172.16.15.16 0.0.0.3 area 0
network 172.16.15.20 0.0.0.3 area 0
network 192.168.0.0 0.0.7.255 area 0
exit
ip nat pool AdeNet 80.80.10.20 80.80.10.20 netmask 255.255.255.255
ip nat inside source list 4 pool AdeNet overload
ip route 0.0.0.0 0.0.0.0 Serial0/0/0
access-list 4 permit 172.16.0.0 0.0.255.255
access-list 4 permit 192.168.0.0 0.0.7.255
==========================
R2
interface FastEthernet0/0
ip address 172.16.8.150 255.255.252.0
interface Serial0/0/0
ip address 172.16.15.1 255.255.255.252
clock rate 2000000
interface Serial0/0/1
ip address 172.16.15.5 255.255.255.252
clock rate 64000
router ospf 12
passive-interface FastEthernet0/0
network 172.16.8.0 0.0.3.255 area 0
network 172.16.15.0 0.0.0.3 area 0
network 172.16.15.4 0.0.0.3 area 0
我 ospf area 0 连接所有 WAN 网络并连接,
和 ISP 和 R1 路由器之间的静态路由和 ISP 和 R1 之间的默认路由
那么,是否缺少任何东西,阻止广域网连接互联网