三、采用NAT方式的配置:
备注:此时2端的地址使用无试验2的限制。但是需要额外的地址池。这样分配给74.40.88.0/24段的地址池是;172.16.0.0/24;分配给74.40.88.0/28网段的地址池是10.0.0.0/28。
这样当PC1访问PC2的时候用10.0.0.2(最后一个IP字节相对应),同理PC2访问PC1的时候用172.16.0.200(最后一个IP字节相对应)。
配置如下:其中红色部分为关键配置
路由器A:
#sysname AR2810-A
#cpu-usage cycle 1min
#router id 1.1.1.1
#radius scheme system
#domain system
#local-user admin
password cipher .]@USE=B,53Q=^Q`MAF4<1!!
service-type telnet terminal
level 3
service-type ftp
#interface Aux0
async mode flow
#interface Ethernet0/0
ip address 74.40.88.254 255.255.255.0
#interface Serial0/0
clock DTECLK1
link-protocol ppp
ip address dhcp-alloc
#
interface Serial2/0
clock DTECLK1
link-protocol ppp
#interface Serial3/0
clock DTECLK1
link-protocol ppp
#interface NULL0
#info-center synchronous
#FTP server enable
#ip route-static 10.0.0.0 255.255.255.240 74.40.88.253 preference 60
#
user-interface con 0
idle-timeout 0 0
user-interface aux 0
user-interface vty 0 4
authentication-mode scheme ?
#
return
路由器B:
#
sysname AR2810-B
#cpu-usage cycle 1min
#router id 2.2.2.2
#nat static inside ip 74.40.88.1 74.40.88.254 global ip 172.16.0.0 255.255.255.0
#radius scheme system
#domain system
#local-user admin
password cipher .]@USE=B,53Q=^Q`MAF4<1!!
service-type telnet terminal
level 3
service-type ftp
#interface Aux0
async mode flow
#interface Ethernet0/0
ip address 74.40.88.253 255.255.255.0
# ?
interface Serial0/0
link-protocol ppp
ip address 192.168.1.1 255.255.255.252
nat outbound static
#interface NULL0
#info-center synchronous
#FTP server enable
#
ip route-static 10.0.0.0 255.255.255.240 192.168.1.2 preference 60
#
user-interface con 0
idle-timeout 0 0
user-interface aux 0
user-interface vty 0 4
authentication-mode scheme
#return
路由器C:
#sysname AR1810-C
#cpu-usage cycle 1min
#router id 3.3.3.3
#nat static inside ip 74.40.88.1 74.40.88.15 global ip 10.0.0.0 255.255.255.240
#radius scheme system
#domain system
#
local-user admin
password cipher .]@USE=B,53Q=^Q`MAF4<1!!
service-type telnet terminal
level 3
service-type ftp
#
interface Aux0
async mode flow
#interface Ethernet0/0
ip address 74.40.88.1 255.255.255.240
# ?
interface Serial0/0
clock DTECLK1
link-protocol ppp
ip address 192.168.1.2 255.255.255.252
nat outbound static
#interface NULL0
#info-center synchronous
#FTP server enable
#ip route-static 172.16.0.0 255.255.255.0 192.168.1.1 preference 60
#
user-interface con 0
idle-timeout 0 0
user-interface aux 0
user-interface vty 0 4
authentication-mode scheme
#
return
互通结果验证:
S2016(PC1):
<S2016>ping 10.0.0.2
PING 10.0.0.2: 56 data bytes, press CTRL+C to break
Reply from 10.0.0.2: bytes=56 Sequence=1 ttl=253 time = 91 ms
Reply from 10.0.0.2: bytes=56 Sequence=2 ttl=253 time = 100 ms
Reply from 10.0.0.2: bytes=56 Sequence=3 ttl=253 time = 88 ms
Reply from 10.0.0.2: bytes=56 Sequence=4 ttl=253 time = 91 ms
Reply from 10.0.0.2: bytes=56 Sequence=5 ttl=253 time = 93 ms
--- 10.0.0.2 ping statistics ---
5 packet(s) transmitted
5 packet(s) received
0.00% packet loss
round-trip min/avg/max = 88/92/100 ms
<S2016>
S2008(PC2):
<S2008>ping 172.16.0.200
PING 172.16.0.200: 56 data bytes, press CTRL+C to break
Reply from 172.16.0.200: bytes=56 Sequence=1 ttl=252 time = 90 ms
Reply from 172.16.0.200: bytes=56 Sequence=2 ttl=252 time = 93 ms
Reply from 172.16.0.200: bytes=56 Sequence=3 ttl=252 time = 111 ms
Reply from 172.16.0.200: bytes=56 Sequence=4 ttl=252 time = 112 ms
Reply from 172.16.0.200: bytes=56 Sequence=5 ttl=252 time = 108 ms
--- 172.16.0.200 ping statistics ---
5 packet(s) transmitted
5 packet(s) received
0.00% packet loss
round-trip min/avg/max = 90/102/112 ms
<S2008>
四、采用主机路由条目指定
备注:此方法即在PC,及经过的所有路径上配置相应的主机路由,因配置较点较多工作量大,也容易出问题并且不利于排错,此处不做研究。
tu.jpg (15.21 KB) 2008-6-14 17:50