华为动态NAT配置问题
将内部网络10.1.1.0/24转换为公网地址200.1.1.1~200.1.1.10/28上网(访问Server3),并抓包分析
2)验证动态NAT是单向转换
[SW1]vlan 10
[SW1-vlan10]quit
[SW1]port-group group-member e0/0/1 e0/0/2 e0/0/3 e0/0/4
[SW1-port-group]port default vlan 10
[SW1-port-group]quit
[SW1]interface GigabitEthernet0/0/1
[SW1-GigabitEthernet0/0/1]port link-type trunk
[SW1-GigabitEthernet0/0/1]port trunk allow-pass vlan all
[SW1-GigabitEthernet0/0/1]quit
[SW1]
[R1]interface GigabitEthernet0/0/0
[R1-GigabitEthernet0/0/0]ip address 10.1.1.254 24
[R1-GigabitEthernet0/0/0]quit
[R1]interface GigabitEthernet0/0/1
[R1-GigabitEthernet0/0/1]ip address 100.1.1.254 24
[R1-GigabitEthernet0/0/1]quit
[R1]interface GigabitEthernet0/0/2
[R1-GigabitEthernet0/0/2]ip address 200.1.1.254 24
[R1-GigabitEthernet0/0/2]quit
[R1]
[R1]acl 2000
[R1-acl-basic-2000]rule 5 permit source 10.1.1.0 0.0.0.255
[R1-acl-basic-2000]quit
[R1]nat address-group 1 200.1.1.1 200.1.1.10
[R1]interface GigabitEthernet0/0/2
[R1-GigabitEthernet0/0/2] nat outbound 2000 address-group 1 no-pat
[R1-GigabitEthernet0/0/2]quit
[R1]dis nat outbound
pc1ping不通server3,帮忙看看少了哪一步啊
厉害,但是还是不懂