Static NAT and dynamic NAT synthesis experiment

Experimental Purpose: The company uses 1 public addresses to connect to the extranet, and maps the intranet Web server to the public address, providing external access!

Experimental topology:

650) this.width=650; "Src=" Http://s3.51cto.com/wyfs02/M01/85/E0/wKioL1etRCCRnCa4AAB0s0X18eM872.jpg-wh_500x0-wm_3 -wmp_4-s_2397168649.jpg "title=" static NAT and dynamic NAT synthesis experiment. jpg "alt=" wkiol1etrccrnca4aab0s0x18em872.jpg-wh_50 "/>

Configuration:

Router R1

R1 (config) #interface serial2/0

R1 (config-if) #ip address 202.1.1.1 255.255.255.0

R1 (config-if) #clock rate 64000

R1 (config-if) #no shutdown

R1 (config-if) #ip Nat outside 

R1 (config-if) # interface fastethernet0/0

R1 (config-if) # IP address 192.168.1.1 255.255.255.0

R1 (config-if) #ip Nat inside 

R1 (config-if) #no shutdown 

R1 (config-if) #exit

r1 (config) #access-list 1 Permit 192.168.1.0 0.0.0.255

r1 (config) # IP nat inside source List 1 interface serial2/0 overload

R1 (config) #IP nat inside source static TCP 192.168.1.4 202.1.1.1 Server maps to an external network

Router R2

R2 (config) #interface serial2/0

R2 (config-if) #ip address 202.1.1.2 255.255.255.0

R2 (config-if) #no shutdown

R2 (config-if) #ip Nat outside

R2 (config-if) #interface fastethernet0/0

R2 (config-if) #ip address 192.168.2.1 255.255.255.0

R2 (config-if) #ip nat inside

R2 (config-if) #no shutdown

R2 (config-if) #exit

R2 (config) #access-list 1 Permit 192.168.2.0 0.0.0.255

R2 (config) #ip nat inside source List 1 interface serial2/0 overload

R2 (config) #ip nat inside source static TCP 192.168.2.4 Map Server to external network

Note: Consider security factors, you can access to the Web services to the end of the network on both sides of the intranet can not directly exchange visits.

This article is from the "Chen Chinese" blog, please be sure to keep this source http://chenhuawen.blog.51cto.com/1998230/1837230

Static NAT and dynamic NAT synthesis experiment