资源预览内容
第1页 / 共24页
第2页 / 共24页
第3页 / 共24页
第4页 / 共24页
第5页 / 共24页
第6页 / 共24页
第7页 / 共24页
第8页 / 共24页
第9页 / 共24页
第10页 / 共24页
亲,该文档总共24页,到这儿已超出免费预览范围,如果喜欢就下载吧!
资源描述
1ppt课件.1.私有地址(Private Addressing )2. NAT操作(NAT Operation)3. NAT分类(NAT Class)4. 配置NAT (Configuring NAT) 5. NAT排错(Troubleshooting NAT Configuration)2ppt课件.Class A:Class B:Class C:1-126128-191192-223127 is lost, why?3ppt课件.1. 公网地址必须被注册Public Internet addresses must be registered by a company with an Internet authority. 2. 私有地址被保留,并可以被任何人使用Private IP addresses are reserved and can be used by anyone. 4ppt课件.私有地址范围(私有地址范围(Private Address Range)5ppt课件.1. NAT典型工作存根网络的边缘A NAT enabled device typically operates at the border of a stub network. 2. 边界路由器执行NAT功能,将内部私有地址转换成公网可路由的地址。The border gateway router performs the NAT process, translating the internal private address of a host to a public, external routable address. NAT操作(操作(NAT Operation)6ppt课件.1. Inside local address 指定给内部主机使用的地址The IP address assigned to a host on the inside network. 2. Inside global address 从SP或NIC注册的地址,即内部主机地址被NAT转换的外部地址A legitimate IP address assigned by the NIC or service provider that represents one or more inside local IP addresses to the outside world. 3. Address Pool-NIC或SP分配使用的多个地址IP addresses assigned by the NIC or service provider NAT术语(术语(NAT Terms) 7ppt课件.1.静态NAT 静态NAT的特征是内部主机地址被一对一映射到外部主机地址Static NAT is designed to allow one-to-one mapping of local and global addresses. NAT分类(分类(NAT Class)Pc1:10.1.1.1-200.200.200.1Pc2:10.1.1.2-200.200.200.2Pc3:10.1.1.3-Pc4:10.1.1.4-200.200.200.2?X8ppt课件.2. 动态NAT动态NAT的特征是内部主机使用地址池中的公网地址来映射Dynamic NAT is designed to map a private IP address to a public address. Any IP address from a pool of public IP addresses is assigned to a network host. Pc1:10.1.1.1-200.200.200.1Pc2:10.1.1.2-200.200.200.2Pc3:10.1.1.3-Pc4:10.1.1.4-200.200.200.2?9ppt课件.3. 端口复用(PAT) 端口复用的特征是内部多个私有地址通过不同的端口被映射到一个公网地址. 理想状况下,一个单一的IP地址可以使用的端口数为4000个。NAT分类(分类(NAT Class)10ppt课件.11ppt课件.r1(config)#ip nat inside source static 10.1.1.2 200.200.200.3r1(config)#ip nat inside source static 10.1.1.3 200.200.200.4r1(config)#interface f0/0r1(config-if)#ip nat inside r1(config)#int s0/0r1(config-if)#ip nat outside 12ppt课件.r1# debug ip nat IP NAT debugging is on00:11:09: NAT: s=10.1.1.2-200.200.200.3, d=2.2.2.2 4093600:11:09: NAT*: s=2.2.2.2, d=200.200.200.3-10.1.1.2 4093600:11:10: NAT*: s=10.1.1.2-200.200.200.3, d=2.2.2.2 40938r1# sh ip nat translations Pro Inside global Inside local Outside local Outside global- 200.200.200.3 10.1.1.2 - - 200.200.200.4 10.1.1.3 - -13ppt课件.14ppt课件.r1(config)#ip nat pool NAT 200.200.200.3 200.200.200.50 netmask 255.255.255.0r1(config)#access-list 1 permit 10.1.1.0 0.0.0.255r1(config)#ip nat inside source list 1 pool NATr1(config)#interface f0/0r1(config-if)#ip nat inside r1(config)#int s0/0r1(config-if)#ip nat outside 15ppt课件.r1# debug ip nat 00:45:40: NAT: s=10.1.1.2-200.200.200.3, d=2.2.2.2 3893000:45:40: NAT*: s=2.2.2.2, d=200.200.200.3-10.1.1.2 3893000:46:03: NAT: s=10.1.1.3-200.200.200.4, d=2.2.2.2 3896100:46:03: NAT*: s=2.2.2.2, d=200.200.200.4-10.1.1.3 3896100:46:27: NAT: s=10.1.1.4-200.200.200.5, d=2.2.2.2 3899300:46:27: NAT*: s=2.2.2.2, d=200.200.200.5-10.1.1.4 3899316ppt课件.r1#sh ip nat translations Pro Inside global Inside local Outside local Outside global- 200.200.200.3 10.1.1.2 200.200.200.4 10.1.1.3 - 200.200.200.5 10.1.1.4 - -r1#clear ip nat translation *r1#sh ip nat translations 17ppt课件.如果我们已经用完地址池中的地址,将发生什么事情?If we have used all available public address in pool, what will happen in next translation?18ppt课件.01:07:36: NAT: translation failed (A), dropping packet s=10.1.1.3 d=2.2.2.2r1#01:07:37: NAT: translation failed (A), dropping packet s=10.1.1.3 d=2.2.2.2以上结果表明NAT转换失败,并将丢包19ppt课件.20ppt课件.r1(config)#ip nat pool NAT 200.200.200.3 200.200.200.50 netmask 255.255.255.0r1(config)#access-list 1 permit 10.1.1.0 0.0.0.255r1(config)#ip nat inside source list 1 pool NAT overloadr1(config)#interface f0/0r1(config-if)#ip nat inside r1(config)#int s0/0r1(config-if)#ip nat outside r1(config)#ip route 0.0.0.0 0.0.0.0 200.200.200.221ppt课件.r1#sh ip nat translations Pro Inside global Inside local Outside local Outside globalicmp 200.200.200.3:1792 10.1.1.4:1792 2.2.2.2:1792 2.2.2.2:1792icmp 200.200.200.3:1024 10.1.1.2:1792 2.2.2.2:1792 2.2.2.2:102422ppt课件.谢谢!23ppt课件.此课件下载可自行编辑修改,供参考!感谢您的支持,我们努力做得更好!
收藏 下载该资源
网站客服QQ:2055934822
金锄头文库版权所有
经营许可证:蜀ICP备13022795号 | 川公网安备 51140202000112号