本次实验通过nat技术实现私网转公网。
实验中 pc1和ar2的基本配置省略，只需要配置基本IP地址就行。主要记录AR3的配置代码。
<Huawei>sy
Enter system view, return user view with Ctrl+Z.
[Huawei]int g0/0/0
[Huawei-GigabitEthernet0/0/0]ip address 192.168.1.254 255.255.255.0 //为0号接口配置IP地址
Feb 4 2024 18:53:25-08:00 Huawei %%01IFNET/4/LINK_STATE(l)[2]:The line protocol
IP on the interface GigabitEthernet0/0/0 has entered the UP state.
[Huawei-GigabitEthernet0/0/0]int g0/0/1
[Huawei-GigabitEthernet0/0/1]ip address 64.1.1.1 255.255.255.0 //为1号接口配置IP地址
Feb 4 2024 18:53:51-08:00 Huawei %%01IFNET/4/LINK_STATE(l)[3]:The line protocol
IP on the interface GigabitEthernet0/0/1 has entered the UP state.
[Huawei-GigabitEthernet0/0/1]
[Huawei-GigabitEthernet0/0/1]q
[Huawei]acl name neiwang basic //定义一个基本的 名称为neiwang的acl
[Huawei-acl-basic-neiwang]rule permit source 192.168.0.0 0.0.255.255 //规则为允许来自192.168的IP数据通过该接口
[Huawei-acl-basic-neiwang]q
[Huawei]nat ? //通过此方法查看nat命令
address-group IP address-group of NAT
alg Application level gateway
dns-map DNS mapping
filter-mode NAT filter mode
link-down Link down reset session function
mapping-mode NAT mapping mode
overlap-address Overlap address pool to temp address pool map
static Specify static NAT
[Huawei]nat address-group 1 64.1.1.2 64.1.1.6 //设定一个nat地址池编号为1 允许内网用户使用2到6IP地址
[Huawei]dis acl all //查看当前配置的所有acl
Total quantity of nonempty ACL number is 1
Basic ACL neiwang 2999, 1 rule
Acl's step is 5
rule 5 permit source 192.168.0.0 0.0.255.255
[Huawei]int g0/0/1
[Huawei-GigabitEthernet0/0/1]nat outbound 2999 address-group 1 //配置nat所有2999acl规则和使用1号地址池