【正文】 address r1(configif)interface loopback 1 r1(configif)ip adress r1(configif)interface s0 r1(configif)ip address 48 r1(configif)no shutdown r1(config)ip route ?配置缺省路由 r2的配置： r2(config)interface loopback 0 r2(configif)ip address r2(configif)interface s1 r2(configif)ip address r2(configif)clock rate 64000 r2(configif)no shutdown r2(config)ip route ?配置缺省路由 做 ping 測試 : r1ping Protocol [ip]: Target IP address: Extended mands [n]: y Source address or interface: !!!!! 49 步驟二、配置 VTY r2(config)line vty 0 4 r2(configline)password cisco ?配置登錄密碼 r2(configline)login 測試： r1tel /sourceinterface loopback 0 ?使用回環(huán)接口做為源 Trying ... Open User Access Verification Password: r2 r1tel /sourceinterface loopback 1 ?以LOOP 1 做為源地址 Trying ... Open 50 User Access Verification Password: ?輸入密碼， 登錄 r2 r2 步驟三、配置訪問列表 r2(config)accesslist 102 permit icmp host host r2(config)accesslist 102 permit eigrp any any ?創(chuàng)建擴展訪問列表 102 r2(config)interface s1 r2(configif)ip accessgroup 102 in ?將列表加載到接口 r2(configif) ping 測試 : r1ping Protocol [ip]: Target IP address: 51 Extended mands [n]: y Source address or interface: !!!!! r1ping Protocol [ip]: Target IP address: Extended mands [n]: y Source address or interface: … .. 步驟四、創(chuàng)建 tel 訪問列表 r2(config)accesslist 10 permit host ?創(chuàng)建標(biāo)準(zhǔn)訪問列表 10 r2(config)line vty 0 4 r2(configline)accessclass 10 in ?加載列表10 r2(configline)exit r2(config) 52 測試 : r1tel Trying ... % Connection refused by remote host r1tel /sourceinterface loopback 0 Trying ... Open User Access Verification Password: r2 步驟五、 顯示 配置 結(jié)果 訪問列表配置： r2show accesslists ?顯示訪問列表 Standard IP access list 10 permit (2 matches) Extended IP access list 102 Permit icmp host host (163 matches) 53 permit tcp any any eq tel (162 matches) r1當(dāng)前配置： r1show runningconfig hostname r1 no ip domainlookup ! interface Loopback0 ip address ! interface Loopback1 ip address ! interface Serial0 ip address clockrate 64000 ! ip route ! end r2的當(dāng)前配置： 54 r2show runningconfig ! hostname r2 ! no ip domainlookup ! interface Loopback0 ip address ! interface Serial1 ip address ip accessgroup 102 in ! ip route ! accesslist 10 permit accesslist 102 permit icmp host host accesslist 102 permit tcp any any eq tel ! line vty 0 4 accessclass 10 in password cisco 55 login ! end 實驗 六 、 靜態(tài)、 動態(tài) NAT 和 PAT 環(huán)境：兩臺路由 器，由串口相聯(lián)。 步驟一、基本配置 56 R1 的配置： R1(config)interface e0 R1(configif)ip address R1(configif)ip address secondary ?設(shè)置輔助 IP R1(configif)ip address secondary R1(configif)ip address secondary R1(configif)no keepalive ?關(guān)閉檢測 R1(configif)no shutdown R1(configif)interface s0 R1(configif)ip address R1(configif)clock rate 64000 R1(configif)no shutdown R2的配置： R2(config)interface loopback 0 R2(configif)ip address R2(configif)interface s1 R2(configif)ip address 57 R2(configif)no shutdown 配置路由： R2(config)ip route serial 1 R1(config)ip route serial 0 步驟二、 NAT與 PAT的創(chuàng)建 NAT的配置 : R1(config)accesslist 10 permit host ?定義轉(zhuǎn)換列表 R1(config)accesslist 10 permit host R1(config)ip nat pool ippool prefixlength 28 ?定義地址池 R1(config)ip nat inside source list 10 pool ippool ?將池和列表關(guān)聯(lián) PAT的配置： R1(config)accesslist 11 permit host ?PAT轉(zhuǎn)換列表 R1(config)ip nat inside source list 11 interface serial 58 0 overload ?與接口映射 靜態(tài) NAT的配置： R1(config)ip nat inside source static R1(config)interface e0 R1(configif)ip nat inside ?加載到接口 R1(configif)interface s0 R1(configif)ip nat outside ?加載到接口 步驟三、測試 R1ping Protocol [ip]: Target IP address: Extended mands [n]: y Source address or interface: !!!!! R1ping Protocol [ip]: Target IP address: Extended mands [n]: y 59 Source address or interface: !!!!! R1ping Protocol [ip]: Target IP address: Extended mands [n]: y Source address or interface: !!!!! R1show ip nat translation ?查看轉(zhuǎn)換列表 Pro Inside global Inside local Outside local Outside global icmp :2832 :2832 :2832 :2832 icmp :2833 :2833 :2833 60 :2833 icmp :2834 :2834 :2834 :2834 icmp :2835 :2835 :2835 :2835 icmp :2836 :2836 :2836 :2836 步驟四、顯示當(dāng)前配置 R1的當(dāng)前配置： R1show runningconfig hostname R1 ! no ip domainlookup ! interface Ether0 ip address secondary ip address secondary ip address secondary ip address ip nat inside 61 no keepalive ! interface Serial0 ip address ip nat outside clockrate 64000 ! ip nat pool ippool prefixlength 28 ip nat inside source list 10 pool ippool ip nat inside source list 11 interface Serial0 overload ip nat inside source static ip route Serial0 ! accesslist 10 permit accesslist 10 permit accesslist 11 permit ! line con 0 exectimeout 0 0 logging synchronous end 62 R2的當(dāng)前配置： r2show runningconfig hostname r2 no ip domainlookup ! interface Loopback0 ip address ! interface Serial1 ip address ! ip route Serial