靜態(tài)NAT
靜態(tài) NAT ( Static NAT )( 一對一 )。將內(nèi)部網(wǎng)絡(luò)的私有IP地址轉(zhuǎn)換為公有IP地址,IP地址對是一對一的,是一直不變的。
實驗拓撲:

PC配置




AR1
sys Entersystemview,returnuserviewwithCtrl+Z. [Huawei] [Huawei]uninen Info:Informationcenterisdisabled. [Huawei] [Huawei]sysAR1 [AR1] [AR1]intg0/0/0 [AR1-GigabitEthernet0/0/0] [AR1-GigabitEthernet0/0/0]ipadd192.168.1.224 [AR1-GigabitEthernet0/0/0] [AR1-GigabitEthernet0/0/0]q [AR1] [AR1]intg0/0/1 [AR1-GigabitEthernet0/0/1] [AR1-GigabitEthernet0/0/1]ipadd192.168.2.224 [AR1-GigabitEthernet0/0/1] [AR1-GigabitEthernet0/0/1]q [AR1] [AR1]intg0/0/2 [AR1-GigabitEthernet0/0/2] [AR1-GigabitEthernet0/0/2]ipadd192.168.3.224 [AR1-GigabitEthernet0/0/2] [AR1-GigabitEthernet0/0/2]q [AR1] [AR1]intg4/0/0 [AR1-GigabitEthernet4/0/0] [AR1-GigabitEthernet4/0/0]ipadd100.100.100.124 [AR1-GigabitEthernet4/0/0] [AR1-GigabitEthernet4/0/0]q [AR1] [AR1]intg4/0/0 [AR1-GigabitEthernet4/0/0] [AR1-GigabitEthernet4/0/0]natstaticglobal100.100.100.3inside192.168.1.1net mask255.255.255.255 [AR1-GigabitEthernet4/0/0] [AR1-GigabitEthernet4/0/0]natstaticglobal100.100.100.4inside192.168.2.1net mask255.255.255.255 [AR1-GigabitEthernet4/0/0] [AR1-GigabitEthernet4/0/0]natstaticglobal100.100.100.5inside192.168.3.1net mask255.255.255.255 [AR1-GigabitEthernet4/0/0] [AR1-GigabitEthernet4/0/0] [AR1-GigabitEthernet4/0/0] [AR1-GigabitEthernet4/0/0]q [AR1]iproute-s [AR1]iproute-static0.0.0.00100.100.100.2 [AR1]
AR2
sys Entersystemview,returnuserviewwithCtrl+Z. [Huawei] [Huawei]uninen Info:Informationcenterisdisabled. [Huawei] [Huawei]sysAR2 [AR2] [AR2]intg0/0/0 [AR2-GigabitEthernet0/0/0] [AR2-GigabitEthernet0/0/0]ipadd100.100.100.224 [AR2-GigabitEthernet0/0/0] [AR2-GigabitEthernet0/0/0]q [AR2] [AR2]intg0/0/1 [AR2-GigabitEthernet0/0/1] [AR2-GigabitEthernet0/0/1]ipadd200.200.200.230 [AR2-GigabitEthernet0/0/1] [AR2-GigabitEthernet0/0/1]q [AR2]
實驗結(jié)果:

動態(tài)NAT
動態(tài)地址 NAT ( Pooled NAT )(多對多)。將內(nèi)部網(wǎng)絡(luò)的私有 IP 地址轉(zhuǎn)換為公用 IP 地址時,IP 地址是不確定,隨機的。所有被授權(quán)訪問 Internet 的私有 IP 地址可隨機轉(zhuǎn)換為任何指定合法的 IP 地址。也就是說,只要指定哪些內(nèi)部地址可以進行轉(zhuǎn)換,以及用哪些合法地址作為外部地址時,就可以進行動態(tài) NAT 轉(zhuǎn)換。動態(tài) NAT 是在路由器上配置一個外網(wǎng) IP 地址池,當(dāng)內(nèi)部有計算機需要和外部通信時,就從地址池里動態(tài)的取出一個外網(wǎng) IP,并將他們的對應(yīng)關(guān)系綁定到 NAT 表中,通信結(jié)束后,這個外網(wǎng) IP 才被釋放,可供其他內(nèi)部 IP 地址轉(zhuǎn)換使用,這個 DHCP 租約 IP 有相似之處。當(dāng) ISP 提供的合法 IP 地址略少于網(wǎng)絡(luò)內(nèi)部的計算機數(shù)量時。可以采用動態(tài)轉(zhuǎn)換的方式。

PC配置同靜態(tài)相同
ISP也無變化
AR1
sys Entersystemview,returnuserviewwithCtrl+Z. [Huawei] [Huawei]uninen Info:Informationcenterisdisabled. [Huawei] [Huawei]sysAR1 [AR1] [AR1]intg0/0/0 [AR1-GigabitEthernet0/0/0] [AR1-GigabitEthernet0/0/0]ipadd192.168.1.224 [AR1-GigabitEthernet0/0/0] [AR1-GigabitEthernet0/0/0]q [AR1] [AR1]intg0/0/1 [AR1-GigabitEthernet0/0/1] [AR1-GigabitEthernet0/0/1]ipadd192.168.2.224 [AR1-GigabitEthernet0/0/1] [AR1-GigabitEthernet0/0/1]q [AR1] [AR1]intg0/0/2 [AR1-GigabitEthernet0/0/2] [AR1-GigabitEthernet0/0/2]ipadd192.168.3.224 [AR1-GigabitEthernet0/0/2] [AR1-GigabitEthernet0/0/2]q [AR1] [AR1]intg4/0/0 [AR1-GigabitEthernet4/0/0] [AR1-GigabitEthernet4/0/0]ipadd100.100.100.124 [AR1-GigabitEthernet4/0/0] [AR1-GigabitEthernet4/0/0]q [AR1] [AR1]nataddress-group1100.100.100.3100.100.100.254 [AR1] [AR1]acl2000 [AR1-acl-basic-2000] [AR1-acl-basic-2000]rule5permitsource192.168.0.00.0.255.255 [AR1-acl-basic-2000] [AR1-acl-basic-2000]q [AR1] [AR1]intg4/0/0 [AR1-GigabitEthernet4/0/0] [AR1-GigabitEthernet4/0/0]natoutbound2000address-group1no-pat [AR1-GigabitEthernet4/0/0] [AR1-GigabitEthernet4/0/0]q [AR1] [AR1]iproute-static0.0.0.00100.100.100.2 [AR1]
實驗結(jié)果:


NAPT
由于 NAT 實現(xiàn)是私有 IP 和 NAT 的公共 IP 之間的轉(zhuǎn)換,那么,私有網(wǎng)中同時與公共網(wǎng)進行通信的主機數(shù)量就受到 NAT 的公共 IP 地址數(shù)量的限制。為了克服這種限制,NAT 被進一步擴展到在進行 IP 地址轉(zhuǎn)換的同時進行 Port 的轉(zhuǎn)換,這就是網(wǎng)絡(luò)地址端口轉(zhuǎn)換 NAPT(Network Address Port Translation)技術(shù)。
NAPT 與 NAT 的區(qū)別在于,NAPT 不僅轉(zhuǎn)換 IP 包中的 IP 地址,還對 IP 包中 TCP 和 UDP 的 Port 進行轉(zhuǎn)換。這使得多臺私有網(wǎng)主機利用 1 個 NAT 公共 IP 就可以同時和公共網(wǎng)進行通信。
實驗拓撲:

PC,ISP,SEVER 1 配置依舊同上
只改變出口設(shè)備配置
AR1(出口設(shè)備)
[Huawei]sysAR1 [AR1] [AR1]intg0/0/0 [AR1-GigabitEthernet0/0/0] [AR1-GigabitEthernet0/0/0]ipadd192.168.1.224 [AR1-GigabitEthernet0/0/0] [AR1-GigabitEthernet0/0/0]q [AR1] [AR1]intg0/0/1 [AR1-GigabitEthernet0/0/1] [AR1-GigabitEthernet0/0/1]ipadd192.168.2.224 [AR1-GigabitEthernet0/0/1] [AR1-GigabitEthernet0/0/1]q [AR1] [AR1]intg0/0/2 [AR1-GigabitEthernet0/0/2] [AR1-GigabitEthernet0/0/2]ipadd192.168.3.224 [AR1-GigabitEthernet0/0/2] [AR1-GigabitEthernet0/0/2]q [AR1] [AR1]intg4/0/0 [AR1-GigabitEthernet4/0/0] [AR1-GigabitEthernet4/0/0]ipadd100.100.100.124 [AR1-GigabitEthernet4/0/0] [AR1-GigabitEthernet4/0/0]q [AR1] [AR1]nataddress-group1100.100.100.3100.100.100.3 [AR1] [AR1]acl2000 [AR1-acl-basic-2000] [AR1-acl-basic-2000]rule5permitsource192.168.0.00.0.255.255 [AR1-acl-basic-2000] [AR1-acl-basic-2000]q [AR1] [AR1]intg4/0/0 [AR1-GigabitEthernet4/0/0] [AR1-GigabitEthernet4/0/0]natoutbound2000address-group1 [AR1-GigabitEthernet4/0/0] [AR1-GigabitEthernet4/0/0]q [AR1] [AR1]iproute-static0.0.0.00100.100.100.2 [AR1] [AR1]q
Easy ip:
Easy-ip是NAPT的一種特例是單向轉(zhuǎn)換的,配置時候不需要創(chuàng)建公網(wǎng)地址池。NAPT是實現(xiàn)私有IP和NAT的公共IP之間的動態(tài)轉(zhuǎn)換。Easy-ip是實現(xiàn)公網(wǎng)IP 地址實現(xiàn)與私網(wǎng)IP 地址之間的映射。適合小型局域網(wǎng)接入Internet的情況,比如小型網(wǎng)吧,中小型企業(yè)。出接口通過撥號方式獲得臨時(或固定)公網(wǎng)IP 地址以供內(nèi)部主機訪問Internet。
拓撲圖

其他配置依舊同上,只更改出口設(shè)備命令:
AR1(出口設(shè)備)
sys Entersystemview,returnuserviewwithCtrl+Z. [Huawei] [Huawei]uninen Info:Informationcenterisdisabled. [Huawei] [Huawei]sysAR1 [AR1] [AR1]intg0/0/0 [AR1-GigabitEthernet0/0/0] [AR1-GigabitEthernet0/0/0]ipadd192.168.1.224 [AR1-GigabitEthernet0/0/0] [AR1-GigabitEthernet0/0/0]q [AR1] [AR1]intg0/0/1 [AR1-GigabitEthernet0/0/1] [AR1-GigabitEthernet0/0/1]ipadd192.168.2.224 [AR1-GigabitEthernet0/0/1] [AR1-GigabitEthernet0/0/1]q [AR1] [AR1]intg0/0/2 [AR1-GigabitEthernet0/0/2] [AR1-GigabitEthernet0/0/2]ipadd192.168.3.224 [AR1-GigabitEthernet0/0/2] [AR1-GigabitEthernet0/0/2]q [AR1] [AR1]intg4/0/0 [AR1-GigabitEthernet4/0/0] [AR1-GigabitEthernet4/0/0]ipadd100.100.100.124 [AR1-GigabitEthernet4/0/0] [AR1-GigabitEthernet4/0/0]q [AR1] [AR1]iproute-static0.0.0.00100.100.100.2 [AR1] [AR1]acl2000 [AR1-acl-basic-2000] [AR1-acl-basic-2000]rule5permitsource192.168.0.00.0.255.255 [AR1-acl-basic-2000] [AR1-acl-basic-2000]q [AR1] [AR1]intg4/0/0 [AR1-GigabitEthernet4/0/0] [AR1-GigabitEthernet4/0/0]natoutbound2000 [AR1-GigabitEthernet4/0/0] [AR1-GigabitEthernet4/0/0]q [AR1]
NAT server配置實驗:
功能是使用一個公網(wǎng)地址來代表內(nèi)部服務(wù)器對外地址。
拓撲圖

外網(wǎng)用戶配置:

server 2內(nèi)網(wǎng)web配置:



路由器配置:
AR1(出口設(shè)備)
sys Entersystemview,returnuserviewwithCtrl+Z. [Huawei] [Huawei]uninen Info:Informationcenterisdisabled. [Huawei] [Huawei]sysAR1 [AR1] [AR1]intg0/0/0 [AR1-GigabitEthernet0/0/0] [AR1-GigabitEthernet0/0/0]ipadd192.168.1.224 [AR1-GigabitEthernet0/0/0] [AR1-GigabitEthernet0/0/0]q [AR1] [AR1]intg4/0/0 [AR1-GigabitEthernet4/0/0] [AR1-GigabitEthernet4/0/0]ipadd100.100.100.124 [AR1-GigabitEthernet4/0/0] [AR1-GigabitEthernet4/0/0]q [AR1] [AR1]iproute-static0.0.0.00100.100.100.2 [AR1] [AR1]acl2000 [AR1-acl-basic-2000] [AR1-acl-basic-2000]rule5permitsource192.168.1.00.0.0.255 [AR1-acl-basic-2000] [AR1-acl-basic-2000]intg4/0/0 [AR1-GigabitEthernet4/0/0] [AR1-GigabitEthernet4/0/0]natoutbound2000 [AR1-GigabitEthernet4/0/0] [AR1-GigabitEthernet4/0/0]q [AR1] [AR1]intg4/0/0 [AR1-GigabitEthernet4/0/0] [AR1-GigabitEthernet4/0/0]natserverprotocoltcpglobal100.100.100.380inside 192.168.1.180 [AR1-GigabitEthernet4/0/0]
AR2(ISP)
sys Entersystemview,returnuserviewwithCtrl+Z. [Huawei] [Huawei]uninen Info:Informationcenterisdisabled. [Huawei] [Huawei]sysAR2 [AR2] [AR2]intg0/0/0 [AR2-GigabitEthernet0/0/0] [AR2-GigabitEthernet0/0/0]ipadd100.100.100.224 [AR2-GigabitEthernet0/0/0] [AR2-GigabitEthernet0/0/0]q [AR2] [AR2]intg0/0/1 [AR2-GigabitEthernet0/0/1] [AR2-GigabitEthernet0/0/1]ipadd200.200.200.224 [AR2-GigabitEthernet0/0/1] [AR2-GigabitEthernet0/0/1]q [AR2]
實驗結(jié)果:

審核編輯:黃飛
-
DHCP
+關(guān)注
關(guān)注
0文章
109瀏覽量
20885 -
NAT
+關(guān)注
關(guān)注
0文章
168瀏覽量
17205 -
ip地址
+關(guān)注
關(guān)注
0文章
309瀏覽量
18991 -
NAPT
+關(guān)注
關(guān)注
0文章
2瀏覽量
5427
原文標題:NAT--靜態(tài)、動態(tài)、NAPT、Easy-ip、NAT server
文章出處:【微信號:網(wǎng)絡(luò)技術(shù)干貨圈,微信公眾號:網(wǎng)絡(luò)技術(shù)干貨圈】歡迎添加關(guān)注!文章轉(zhuǎn)載請注明出處。
發(fā)布評論請先 登錄
nat的類型有哪些
如何向VxWorks網(wǎng)絡(luò)協(xié)議棧加入NAT?
請問使用esp-idf中的lwip啟用NAT失敗是何原因呢?
在VxWorks下實現(xiàn)NAT NAPT的方法
動態(tài)ip地址和靜態(tài)ip有什么區(qū)別
動態(tài)ip、靜態(tài)ip、pppoe撥號的區(qū)別
恒訊科技分享:如何在Windows Server上配置靜態(tài)ip?
靜態(tài)ip和動態(tài)ip的區(qū)別
華為動態(tài)NAT、靜態(tài)NAT實驗配置步驟
NAT設(shè)備常用場景
靜態(tài)IP與動態(tài)IP的區(qū)別
網(wǎng)絡(luò)靜態(tài)ip和動態(tài)區(qū)別
PLC網(wǎng)段IP轉(zhuǎn)換器(NAT網(wǎng)關(guān))有什么功能
Nat server技術(shù)原理和配置過程
靜態(tài)、動態(tài)、NAPT、Easy-ip與NAT server應(yīng)用探討
評論