NAT实验组合实战-静态+端口映射

NAT实验组-静态+端口映射

静态NAT

拓扑图如下：

实验步骤

1、设置sw三层交换机

sw#conf t Enter configuration commands, one per line.  End with CNTL/Z.sw(config)#no ip routing                    //关闭路由功能sw(config)#

2、设置路由R1

R1#conf t Enter configuration commands, one per line.  End with CNTL/Z.R1(config)#int f0/0R1(config-if)#ip add 192.168.10.1 255.255.255.0          //仅设定IP地址与子网掩码R1(config-if)#no shut *Mar  1 00:03:21.575: %LINK-3-UPDOWN: Interface FastEthernet0/0, changed state to up*Mar  1 00:03:22.575: %LINEPROTO-5-UPDOWN: Line protocol on Interface FastEthernet0/0, changed state to upR1(config-if)#int f 0/1 R1(config-if)#ip add 8.0.0.1 255.0.0.0                   //仅设定IP地址与字网掩码R1(config-if)#no shut *Mar  1 00:03:42.443: %LINK-3-UPDOWN: Interface FastEthernet0/1, changed state to up*Mar  1 00:03:43.443: %LINEPROTO-5-UPDOWN: Line protocol on Interface FastEthernet0/1, changed state to upR1(config-if)#exR1(config)#ip route 0.0.0.0 0.0.0.0 8.0.0.2             //设置默认路由R1(config)#do show ip route                             //查看路由表Codes: C - connected, S - static, R - RIP, M - mobile, B - BGP       D - EIGRP, EX - EIGRP external, O - OSPF, IA - OSPF inter area        N1 - OSPF NSSA external type 1, N2 - OSPF NSSA external type 2       E1 - OSPF external type 1, E2 - OSPF external type 2       i - IS-IS, su - IS-IS summary, L1 - IS-IS level-1, L2 - IS-IS level-2       ia - IS-IS inter area, * - candidate default, U - per-user static route       o - ODR, P - periodic downloaded static routeGateway of last resort is 8.0.0.2 to network 0.0.0.0C    192.168.10.0/24 is directly connected, FastEthernet0/0C    8.0.0.0/8 is directly connected, FastEthernet0/1S*   0.0.0.0/0 [1/0] via 8.0.0.2R1(config)#

3、设置路由R2

R2#conf t Enter configuration commands, one per line.  End with CNTL/Z.R2(config)#int f 0/1R2(config-if)#ip add 8.0.0.2 255.0.0.0                //仅设定IP地址与子网掩码R2(config-if)#no shut R2(config-if)#int f 0/0R2(config-if)#*Mar  1 00:05:13.815: %LINK-3-UPDOWN: Interface FastEthernet0/1, changed state to up*Mar  1 00:05:14.815: %LINEPROTO-5-UPDOWN: Line protocol on Interface FastEthernet0/1, changed state to upR2(config-if)#ip add 192.168.200.1 255.255.255.0          //仅设定IP地址与字网掩码R2(config-if)#no shut R2(config-if)#*Mar  1 00:05:40.643: %LINK-3-UPDOWN: Interface FastEthernet0/0, changed state to up*Mar  1 00:05:41.643: %LINEPROTO-5-UPDOWN: Line protocol on Interface FastEthernet0/0, changed state to upR2(config-if)#exR2(config)#ip route 192.168.10.0 255.255.255.0 8.0.0.1       //设置静态路由R2(config)#do show ip route                                  //查看路由表Codes: C - connected, S - static, R - RIP, M - mobile, B - BGP        D - EIGRP, EX - EIGRP external, O - OSPF, IA - OSPF inter area        N1 - OSPF NSSA external type 1, N2 - OSPF NSSA external type 2       E1 - OSPF external type 1, E2 - OSPF external type 2       i - IS-IS, su - IS-IS summary, L1 - IS-IS level-1, L2 - IS-IS level-2       ia - IS-IS inter area, * - candidate default, U - per-user static route       o - ODR, P - periodic downloaded static routeGateway of last resort is not setS    192.168.10.0/24 [1/0] via 8.0.0.1C    192.168.200.0/24 is directly connected, FastEthernet0/0C    8.0.0.0/8 is directly connected, FastEthernet0/1R2(config)#

4、设定三台PC机

PC1

PC1> PC1> ip 192.168.10.10 192.168.10.1Checking for duplicate address...PC1 : 192.168.10.10 255.255.255.0 gateway 192.168.10.1PC1>

PC2

PC2> PC2> ip 192.168.10.20 192.168.10.1Checking for duplicate address...PC1 : 192.168.10.20 255.255.255.0 gateway 192.168.10.1PC2> 

PC3

PC3> PC3> ip 192.168.200.20 192.168.200.1Checking for duplicate address...PC1 : 192.168.200.20 255.255.255.0 gateway 192.168.200.1PC3> 

此时，整个实验结构已完成，已经可以做到全网互通，参考如下：（如不能联通，请自行检查）

为满足实验目的，接下来将进行静态NAT的设置

在R1上设置静态NAT

R1(config)#ip nat source static 192.168.10.10 8.8.8.8            //静态NAT1*Mar  1 00:13:12.995: %LINEPROTO-5-UPDOWN: Line protocol on Interface NVI0, changed state to upR1(config)#ip nat source static 192.168.10.20 8.8.8.10           //静态NAT2R1(config)#int f 0/0R1(config-if)#ip nat inside                                      //启用外部NATR1(config-if)#int f 0/1     R1(config-if)#ip nat outside                                     //启用内部NATR1(config-if)#

实验完成\~\~\~\~\~

静态NAT-端口映射

拓扑图如下：

实验步骤

1、设置Linux服务器

将端口进行绑定，绑定在VMnet1上，并设置静态IP

[root@localhost ~]# vim /etc/sysconfig/network-scripts/ifcfg-ens33 改dhcp为static在末行按o在下行插入IPADDR=192.168.100.100NETMASK=255.255.255.0GATEWAY=192.168.100.1[root@localhost ~]# service network restartRestarting network (via systemctl):                        [  确定  ][root@localhost ~]# ifconfigens33: flags=4163  mtu 1500        inet 192.168.100.100  netmask 255.255.255.0  broadcast 192.168.100.255

安装http服务并自定义首页

[root@localhost ~]# yum install httpd -y[root@localhost ~]# vim /var/www/html/index.html        //写测试网页
this is inside web
[root@localhost ~]# systemctl start httpd[root@localhost ~]# systemctl stop firewalld.service [root@localhost ~]# setenforce 0

2、设置路由R1

R1#conf t Enter configuration commands, one per line.  End with CNTL/Z.R1(config)#int f 0/0R1(config-if)#ip add 192.168.10.1 255.255.255.0              //仅设置IP地址和子网掩码R1(config-if)#no shut *Mar  1 00:00:44.895: %LINK-3-UPDOWN: Interface FastEthernet0/0, changed state to up*Mar  1 00:00:45.895: %LINEPROTO-5-UPDOWN: Line protocol on Interface FastEthernet0/0, changed state to upR1(config-if)#int f 0/1R1(config-if)#ip add 8.0.0.1 255.0.0.0                       //仅设置IP地址和子网掩码R1(config-if)#no shut R1(config-if)#ex*Mar  1 00:01:03.159: %LINK-3-UPDOWN: Interface FastEthernet0/1, changed state to up*Mar  1 00:01:04.159: %LINEPROTO-5-UPDOWN: Line protocol on Interface FastEthernet0/1, changed state to upR1(config-if)#exR1(config)#

3、设置Host2主机

绑定VMnet2，并设置静态IP

此时，通过在浏览器在输入192.168.100.100，即可访问对方网页

为了满足实验要求，下面将进行端口映射

R1

R1(config)#ip nat inside source static tcp 192.168.100.100 80 12.0.0.100 8080 extendable R1(config)#int f0/0R1(config-if)#ip nat insideR1(config-if)#int f0/1R1(config-if)#ip nat outsidR1(config-if)#endR1#debug ip natIP NAT debugging is on*Mar  1 00:36:59.327: NAT*: TCP s=49160, d=8080->80*Mar  1 00:36:59.327: NAT*: s=12.0.0.12, d=12.0.0.100->192.168.100.100 [364]//端口和地址都进行了转换

验证结果

使用Host2主机再次进行访问，输入http://12.0.0.100:8080同样可以访问。