1、MSR1 配置
#
//用户NAT的地址池
nat address-group 1 202.100.1.3 202.100.1.6
#
//配置允许进行NAT转换的内网地址段
acl number 2000
rule 0 permit source 192.168.0.0 0.0.0.255
rule 1 deny
#
interface GigabitEthernet0/0
port link-mode route
//在出接口上进行NAT转换
nat outbound 2000 address-group 1
//在出接口上配置内网服务器192.168.0.2的www服务
nat server protocol tcp global 202.100.1.3 www inside 192.168.0.2 www
ip address 202.100.1.2 255.255.255.0
#
interface GigabitEthernet0/1
port link-mode route
//内网网关
ip address 192.168.0.1 255.255.255.0
#
//配置默认路由
ip route-static 0.0.0.0 0.0.0.0 202.100.1.1
#
