实现NAPT、Easy-IP、NATserver、NATstatic

IT猿手2026-11-04 20:27

网络拓扑

配置：

AR1：

复制代码

[AR1]dis current-configuration
[V200R003C00]
#
 sysname AR1
#
 undo info-center enable
#
 dns resolve  
 dns server 202.1.1.3 
 dns server 101.1.1.1 
#

acl number 2000  
 rule 5 permit source 192.168.10.0 0.0.0.255 

 nat address-group 1 12.0.0.3 12.0.0.10
#
interface GigabitEthernet0/0/0
 ip address 192.168.10.5 255.255.255.0 
#
interface GigabitEthernet0/0/1
 ip address 12.0.0.1 255.255.255.0 
 nat outbound 2000 address-group 1 
#
interface GigabitEthernet0/0/2
 ip address 13.0.0.1 255.255.255.0 
 nat outbound 2000

#
ospf 1 
 area 0.0.0.0 
  network 12.0.0.0 0.0.0.255 
  network 13.0.0.0 0.0.0.255 
#
ip route-static 101.1.1.0 255.255.255.0 13.0.0.3
ip route-static 202.1.1.3 255.255.255.255 12.0.0.2
#

return
[AR1]

AR2：

复制代码

[AR2]dis curr
[V200R003C00]
#
 sysname AR2
#
 undo info-center enable
#
 dns resolve  
 dns server 192.168.20.1 
#

 nat alg ftp enable
#
interface GigabitEthernet0/0/0
 ip address 12.0.0.2 255.255.255.0 
 arp-proxy enable
 nat server protocol tcp global 202.1.1.3 www inside 192.168.20.1 www
 nat server protocol tcp global 202.1.1.3 ftp inside 192.168.20.1 ftp
 nat server protocol udp global 202.1.1.3 dns inside 192.168.20.1 dns
 nat server protocol icmp global 202.1.1.3 inside 192.168.20.1
#
interface GigabitEthernet0/0/1
 ip address 192.168.20.5 255.255.255.0 
#

ospf 1 
 area 0.0.0.0 
  network 10.10.10.10 0.0.0.0 
  network 12.0.0.0 0.0.0.255 
#
ip route-static 101.1.1.0 255.255.255.0 12.0.0.1
#

[AR2]

AR3：

复制代码

[Huawei]dis curr
[V200R003C00]

 nat alg ftp enable
#
interface GigabitEthernet0/0/0
 ip address 13.0.0.3 255.255.255.0 
 nat static global 101.1.1.1 inside 192.168.30.1 netmask 255.255.255.255
 nat static enable
#
interface GigabitEthernet0/0/1
 ip address 192.168.30.2 255.255.255.0 
#
interface GigabitEthernet0/0/2
#
interface NULL0
#
ospf 1 
 area 0.0.0.0 
  network 13.0.0.0 0.0.0.255 
#
return
[Huawei]