z-notes

实战：配置动态NAT

实战1：

[Huawei]nat address-group 1 ?
[Huawei]nat address-group 1 12.2.2.2 12.2.2.3

[Huawei]acl 2000
[Huawei-acl-basic-2000]rule 5 permit source 192.168.0.0 0.0.0.255
[Huawei-acl-basic-2000]rule 10 deny
[Huawei-acl-basic-2000]quit

[Huawei]interface GigabitEthernet 0/0/1
[Huawei-GigabitEthernet0/0/1]nat outbound 2000 address-group 1

PC抓包

PC4抓包

实战2：

AR3

<Huawei>sys
[Huawei]interface GigabitEthernet 0/0/0
[Huawei-GigabitEthernet0/0/0]ip address 192.168.0.254 24
[Huawei-GigabitEthernet0/0/0]quit

[Huawei]interface GigabitEthernet 0/0/1
[Huawei-GigabitEthernet0/0/1]ip address 192.168.1.1 24
[Huawei-GigabitEthernet0/0/1]quit

[Huawei]ip route-static 0.0.0.0 0 192.168.0.1

AR1

<Huawei>sys
[Huawei]ip route-static 192.168.1.0 24 192.168.0.254
[Huawei-acl-basic-2000]rule 6 permit source 192.168.1.0 0.0.0.255

测试

PC1

PC5