我已经为 NAT 和 PFR 目的配置了 ACL。ios c1841-adventerprisek9-mz.151-4.M4.bin
ip access-list extended PFR
permit ip 192.168.0.0 0.0.7.255 any log
route-map isp2 permit 10
match ip address PFR
match interface Serial0/0/0
!
route-map isp1 permit 10
match ip address PFR
match interface FastEthernet0/0
!
ip nat inside source route-map isp1 interface FastEthernet0/0 overload oer
ip nat inside source route-map isp2 interface Serial0/0/0 overload oer
其中 192.168.1.0 255.255.248.0 内部网络(fa0/1),213.70.2.0 fa0/0 - 外部,80.4.5.0 s0/0/0 - 外部。
FastEthernet0/0 213.70.2.2
FastEthernet0/1 192.168.1.1
Serial0/0/0 80.4.5.2
但是本地地址不匹配。此外,我尝试通过 Cisco 手册“性能路由配置指南,Cisco IOS Release 15M&T”中的说明来重写它,但是:
office(config)#ip nat inside source route-map PFR1 pool isp1 oer
^
% Invalid input detected at '^' marker.
oer 和 pfr 选项均不可用。
here is the new config:
ip nat pool isp1 213.70.2.2 213.70.2.2 prefix-length 30
ip nat pool isp2 80.4.5.2 80.4.5.2 prefix-length 30
access-list 1 permit 192.168.0.0 0.0.255.255 log
route-map PFR1 permit 10
match ip address 1
match interface FastEthernet0/0
!
route-map PFR2 permit 10
match ip address 1
match interface Serial0/0/0
!
如果我写了overload oer,命令就会被接受。配置有什么问题,为什么我的 ios 在编写时没有选项?
PS。最搞笑的是,在我出差之前就已经奏效了
Pro Inside global Inside local Outside local Outside global
icmp 213.70.2.2:1 192.168.1.3:1 192.168.176.63:1 192.168.176.63:1
office#wr