【正文】 configif)no shutdown //啟動(dòng)接口RouterA(configif)exitRouterA(config)interface serial 2/0 //配置端口S 2/0RouterA(configif)ip address //配置端口S 2/0的IP地址RouterA(configif)ip nat outside //配置端口S 2/0為外部接口RouterA(configif)no shutdown //啟動(dòng)接口RouterA(configif)end步驟二：配置PC1PC3PC1 IP Address. . . . . . . . . . . . : Subnet Mask . . . . . . . . . . . : Default Gateway . . . . . . . . . : PC2 IP Address. . . . . . . . . . . . : Subnet Mask . . . . . . . . . . . : Default Gateway . . . . . . . . . : PC3 IP Address. . . . . . . . . . . . : Subnet Mask . . . . . . . . . . . : Default Gateway . . . . . . . . . : 步驟三：配置完成后可以用以下語句進(jìn)行查看：RouterAshow ip nat translationsRouterAshow ip nat statistics(3) 動(dòng)態(tài)NAT地址轉(zhuǎn)換實(shí)驗(yàn)拓?fù)鋱D，如圖52所示： 圖52：動(dòng)態(tài)NAT地址轉(zhuǎn)換實(shí)驗(yàn)拓?fù)鋱D（4）動(dòng)態(tài)NAT地址轉(zhuǎn)換實(shí)驗(yàn)步驟：步驟一：配置路由器RouterRouterenRoutercon terRouter(config)inter F 0/0Router(configif)ip add Router(configif)ip nat insideRouter(configif)no shutRouter(configif)exitRouter(config)inter F 1/0Router(configif)ip add Router(configif)ip nat outsideRouter(configif)no shutRouter(configif)exitRouter(config)ip nat pool aa netmask Router(config)accesslist 1 permit Router(config)ip nat inside source list 1 pool aaRouter(config)exit步驟二：配置PC1與PC2PC1 IP Address. . . . . . . . . . . . : Subnet Mask . . . . . . . . . . . : Default Gateway . . . . . . . . . : C ipconfig /ip Cipconfig /dg PC2 IP Address. . . . . . . . . . . . : Subnet Mask . . . . . . . . . . . : Default Gateway . . . . . . . . . : C ipconfig /ip Cipconfig /dg 步驟二：測(cè)試PC1：C:ping Pinging with 32 bytes of data:Reply from : bytes=32 time=60ms TTL=241Reply from : bytes=32 time=60ms TTL=241Reply from : bytes=32 time=60ms TTL=241Reply from : bytes=32 time=60ms TTL=241Reply from : bytes=32 time=60ms TTL=241Ping statistics for : Packets: Sent = 5, Received = 5, Lost = 0 (0% loss),Approximate round trip times in milliseconds: Minimum = 50ms, Maximum = 60ms, Average = 55msC:ping Pinging with 32 bytes of data:Reply from : bytes=32 time=60ms TTL=241Reply from : bytes=32 time=60ms TTL=241Reply from : bytes=32 time=60ms TTL=241Reply from : bytes=32 time=60ms TTL=241Reply from : bytes=32 time=60ms TTL=241Ping statistics for : Packets: Sent = 5, Received = 5, Lost = 0 (0% loss),Approximate round trip times in milliseconds: Minimum = 50ms, Maximum = 60ms, Average = 55msPC2：C:ping Pinging with 32 bytes of data:Reply from : bytes=32 time=60ms TTL=241Reply from : bytes=32 time=60ms TTL=241Reply from : bytes=32 time=60ms TTL=241Reply from : bytes=32 time=60ms TTL=241Reply from : bytes=32 time=60ms TTL=241Ping statistics for : Packets: Sent = 5, Received = 5, Lost = 0 (0% loss),Approximate round trip times in milliseconds: Minimum = 50ms, Maximum = 60ms, Average = 55ms步驟四：配置完成后可以用以下語句進(jìn)行查看：RouterAshow ip nat translationsPro Inside global Inside local Outside local Outside globalIcmp :9392 :9392 :9392 :9392Icmp :9393 :9393 :9393 :9393Icmp :9394 :9394 :9394 :9394Icmp :9395 :9395 :9395 :9395Icmp :9396 :9396 :9396 :9396RouterAshow ip nat statistics Total active translations: 1 (0 static, 1 dynamic。 1 extended)Outside interfaces: Ethernet1Inside interfaces: Ethernet0Hits: 5 Misses: 5Expired translations: 5Dynamic mappings: Inside SourceAccess list + 1interface refcount 0RedGiant(config)host RouterARouterA(config)interface fastethernet 0RouterA(configif)exitRouterA(config)accesslist 1 permit RouterA(config)ip nat inside source list 1 interface fastethernet 0RouterA(config)ip nat inside source list 1 interface serial 0RouterA(config)interface fa 0RouterA(configif)ip address RouterA(configif)ip nat insideRouterA(configif)no shutRouterA(configif)exitRouterA(config)%UPDOWN: Line protocol on Interface FastEthernet0, changed state to up%UPDOWN: Interface FastEthernet0, changed state to up%UPDOWN: Line protocol on Interface FastEthernet0, changed state to downRouterA(config)interface s0RouterA(configif)ip address RouterA(configif)ip nat%UPDOWN: Interface Serial0, changed state to down% Inplete mand.RouterA(configif)ip nat outsideRouterA(configif)no shutRouterA(configif)endRouterAconf tEnter configuration mands, one per line. End with CNTL/Z.RouterA(config)accesslist 1 permit host RouterA(config)accesslist 1 deny anyRouterA(config)interface fastethernet 0RouterA(configif)ip accessgroup 1 outRouterA(configif)endRouterAshow accesslist 1Standard IP access list 1 permit permit , wildcard bits deny anyRouterAconftRouterA(config)accesslist 2 permit host RouterA(config)accesslist 2 deny RouterA(config)accesslist 2 permit RouterA(config)interface fastethernet 0RouterA(configif)exit實(shí)驗(yàn)六、綜合實(shí)驗(yàn)一、實(shí)驗(yàn)要求：1根據(jù)拓樸圖分別在S2126和S3550創(chuàng)建相應(yīng)VLAN，并在S2126上將F0/1015加入VLAN2，將F0/1620加入VLAN4，在S3550上將F0/1012加入VLAN3，解決環(huán)路問題，采用PAP方式進(jìn)行驗(yàn)證提高鏈路的安全性。，只有VLAN4不可以訪問FTP服務(wù)。，并進(jìn)行驗(yàn)證。二、 實(shí)驗(yàn)步驟： ：（1）創(chuàng)建VALN：switch enable switch config terminal switch(config) hostname S2126 S2126(config) vlan 2 S2126(configvlan) name vlan02S2126(config) vlan 4S2126(configvlan) name vlan04S2126(configvlan) end S2126 （2）為VLAN分配接口：S2126 config terminal S2126(config) interface Range fa0/1015 S2126(configif) switchport mode access(可省略)S2126(configifrange) switchport access vlan 2S2126(configifrange) exit S2126