154
[Router-acl-ipv4-basic-2000] rule permit source 192.168.1.0 0.0.0.255
[Router-acl-ipv4-basic-2000] quit
# Create address group 1.
[Router] nat address-group 1
# Add address 202.38.1.2 to the address group.
[Router-address-group-1] address 202.38.1.2 202.38.1.2
[Router-address-group-1] quit
# Create address group 2.
[Router] nat address-group 2
# Add address 202.38.1.3 to the address group.
[Router-address-group-2] address 202.38.1.3 202.38.1.3
[Router-address-group-2] quit
# Configure NAT Server on interface GigabitEthernet 2/0/2 to allow external hosts to access the
internal DNS server by using the address 202.38.1.4.
[Router] interface gigabitethernet 2/0/2
[Router-GigabitEthernet2/0/2] nat server protocol udp global 202.38.1.4 inside
192.168.1.3 dns
# Enable outbound NO-PAT on interface GigabitEthernet 2/0/2 to translate IP address of the Web
server in the DNS response payload into the address in address group 1, and allow reversible NAT.
[Router-GigabitEthernet2/0/2] nat outbound 2000 address-group 1 no-pat reversible
# Enable inbound PAT on interface GigabitEthernet 2/0/2 to translate the source address of packets
going to the internal network to the address in address group 2.
[Router-GigabitEthernet2/0/2] nat inbound 2000 address-group 2
[Router-GigabitEthernet2/0/2] quit
# Configure a static route to 202.38.1.3 with GigabitEthernet 2/0/2 as the output interface and
20.2.2.2 as the next hop. (The next hop address varies by network.)
[Router] ip route-static 202.38.1.3 32 gigabitethernet 2/0/2 20.2.2.2
Verifying the configuration
# Verify that the host on the external network can use the domain name to access the internal Web
server whose address is the same as the host. (Details not shown.)
# Display all NAT configuration and statistics.
[Router] display nat all
NAT address group information:
Totally 2 NAT address groups.
Address group 1:
Port range: 1-65535
Address information:
Start address End address
202.38.1.2 202.38.1.2
Address group 2:
Port range: 1-65535
Address information:
Start address End address
202.38.1.3 202.38.1.3
NAT inbound information:
To Next Page
Loading...
Need help?
General
