With the rapid development of internet, the shortage of IP addresses has become a very prominent problem. A variety of solutions have emerged to solve this problem. The following describes an effective method in the current network environment: address translation (NAT. I. Introduction to NAT (NetworkAddressTranslation) refers to the function within a network.
With the rapid development of internet, the shortage of IP addresses has become a very prominent problem. A variety of solutions have emerged to solve this problem. The following describes an effective method in the current network environment: address translation (NAT. I. Introduction to NAT (Network Address Translation) refers to the function of a Network
With the rapid development of internet, the shortage of IP addresses has become a very prominent problem. A variety of solutions have emerged to solve this problem. The following describes an effective method in the current network environment: address translation (NAT.
1. NAT Introduction
NAT (Network Address Translation) is an IP Address that can be customized within a Network as needed without application. In the network, computers communicate through internal IP addresses. When the internal computer needs to communicate with the external internet, the device with the NAT Function (such as a router) converts an internal IP address to a valid IP address (that is, the requested IP address) for communication.
2. NAT application environment
Scenario 1: an enterprise does not want external network users to know its internal network structure. It can use NAT to isolate the internal network from the external Internet, the external user does not know the internal IP address set through NAT.
Case 2: An enterprise applies for a small number of valid Internet IP addresses, and there are many internal network users. You can use the NAT Function to allow multiple users to communicate with the external Internet by sharing a valid IP address at the same time.
3. Configure the hardware and software of the vro required for NAT:
The vro that sets the NAT Function must have at least one internal port (Inside) and one external port (Outside ). The network user connecting to an internal port uses an internal IP address.
The internal port can be any vro port. The external port is connected to an external network, such as the Internet. The external port can be any port on the router.
IOS vro with the NAT Function configured should support the NAT Function (in this example, Cisco2501 is used, and IOS 11.2 and later versions support the NAT Function ).
4. Several Concepts about NAT:
Internal local address: the internal IP address assigned to the computer in the internal network.
Inside global address: valid IP addresses that indicate one or more internal local addresses when an external IP address is used for communication. The IP address that can be obtained only after application.
5. NAT settings:
NAT settings can be divided into static address translation, dynamic address translation, and multiplexing dynamic address translation.
1. Environment applicable to static address translation
Static address translation performs one-to-one conversion between the internal local address and the internal legal address, and specifies the legal address to which the conversion is required. If there are E-mail servers or FTP servers in the internal network that can provide services to external users, the IP addresses of these servers must adopt static address translation so that external users can use these services.
To configure static address translation, follow these steps:
(1) Establish static address conversion between the internal local address and the internal legal address. Enter:
Ip nat inside source static internal local address internal legal address
(2) Specify the internal port used to connect to the network. In the port setting status, enter:
Ip nat inside
(3) Specify the external port connecting to the external network and enter the following in the port setting status:
Ip nat outside
Note: You can define multiple internal ports and multiple external ports as needed.
Instance 1:
This instance implements static NAT address translation. Use the 2501 Ethernet port as the internal port and the synchronization port 0 as the external port. The internal local addresses 10.1.1.2, 10.1.1.3, and 10.1.1.4 use static address conversion. The valid internal addresses are respectively 192.1.1.2, 192.1.1.3, and 192.1.1.4.
Vro2501 Configuration:
Current configuration:
Version 11.3:
No service password-encryption
Hostname 2501
Ip nat inside source static 10.1.1.2 192.1.1.2
Ip nat inside source static 10.1.1.3 192.1.1.3
Ip nat inside source static 10.1.1.4 192.1.1.4
Interface Ethernet0
Ip address 10.1.1.1 255.255.255.0
Ip nat inside
Interface Serial0
Ip address 192.1.1.1 255.255.255.0
Ip nat outside
No ip mroute-cache
Bandwidx 2000
No fair-queue
Clockrate 2000000
Interface Serial1
No ip address
Shutdown
No ip classless
Ip route 0.0.0.0 0.0.0.0 Serial0
Line con 0
Line aux 0
Line vty 0 4
Password cisco
End
After the configuration is complete, you can view it using the following statement:
Show ip nat statistcs
Show ip nat translations
2. Environment applicable to Dynamic Address Translation:
Dynamic address translation is also a one-to-one conversion between a local address and a valid internal address, however, dynamic address translation dynamically selects a last address from the internal valid address pool to convert the internal local address.
Follow these steps to configure Dynamic Address Translation:
(1) define an internal valid address pool in Global Setting Mode
Ip nat pool address pool name start ip address end ip address Subnet Mask
The address pool name can be set at will.
(2) define a standard access-list rule in global setting mode to allow dynamic address translation for internal addresses.
Access-list label: permit source address wildcard
The value is an integer between 1 and 99.
(3) In global setting mode, address translation is performed between the internal local address specified by access-list and the specified internal legal address pool.
Ip nat inside source list access list entry valid address pool name inside pool
(4) Specify the internal port connected to the internal network in the port setting status:
Ip nat inside
(5) Specify the external port connected to the external network
Ip nat outside
