【网工】华为设备命令学习（nat网络地址转换）

本次实验通过nat技术实现私网转公网。

实验中 pc1和ar2的基本配置省略，只需要配置基本IP地址就行。主要记录AR3的配置代码。

<Huawei>sy

Enter system view, return user view with Ctrl+Z.

$Huawei$ int g0/0/0

$Huawei-GigabitEthernet0/0/0$ ip address 192.168.1.254 255.255.255.0 //为0号接口配置IP地址

Feb 4 2024 18:53:25-08:00 Huawei %%01IFNET/4/LINK_STATE(l) $2$ :The line protocol

IP on the interface GigabitEthernet0/0/0 has entered the UP state.

$Huawei-GigabitEthernet0/0/0$ int g0/0/1

$Huawei-GigabitEthernet0/0/1$ ip address 64.1.1.1 255.255.255.0 //为1号接口配置IP地址

Feb 4 2024 18:53:51-08:00 Huawei %%01IFNET/4/LINK_STATE(l) $3$ :The line protocol

IP on the interface GigabitEthernet0/0/1 has entered the UP state.

Huawei-GigabitEthernet0/0/1

$Huawei-GigabitEthernet0/0/1$ q

$Huawei$ acl name neiwang basic //定义一个基本的名称为neiwang的acl

$Huawei-acl-basic-neiwang$ rule permit source 192.168.0.0 0.0.255.255 //规则为允许来自192.168的IP数据通过该接口

$Huawei-acl-basic-neiwang$ q

$Huawei$ nat ? //通过此方法查看nat命令

address-group IP address-group of NAT

alg Application level gateway

dns-map DNS mapping

filter-mode NAT filter mode

link-down Link down reset session function

mapping-mode NAT mapping mode

overlap-address Overlap address pool to temp address pool map

static Specify static NAT

$Huawei$ nat address-group 1 64.1.1.2 64.1.1.6 //设定一个nat地址池编号为1 允许内网用户使用2到6IP地址

$Huawei$ dis acl all //查看当前配置的所有acl

Total quantity of nonempty ACL number is 1

Basic ACL neiwang 2999, 1 rule

Acl's step is 5

rule 5 permit source 192.168.0.0 0.0.255.255

$Huawei$ int g0/0/1

$Huawei-GigabitEthernet0/0/1$ nat outbound 2999 address-group 1 //配置nat所有2999acl规则和使用1号地址池