【网工】华为设备命令学习（nat网络地址转换）

news2024/11/15 10:21:09

本次实验通过nat技术实现私网转公网。

实验中 pc1和ar2的基本配置省略，只需要配置基本IP地址就行。主要记录AR3的配置代码。

<Huawei>sy
Enter system view, return user view with Ctrl+Z.
[Huawei]int g0/0/0
[Huawei-GigabitEthernet0/0/0]ip address 192.168.1.254 255.255.255.0   //为0号接口配置IP地址
Feb 4 2024 18:53:25-08:00 Huawei %%01IFNET/4/LINK_STATE(l)[2]:The line protocol
IP on the interface GigabitEthernet0/0/0 has entered the UP state.
[Huawei-GigabitEthernet0/0/0]int g0/0/1
[Huawei-GigabitEthernet0/0/1]ip address 64.1.1.1 255.255.255.0       //为1号接口配置IP地址
Feb 4 2024 18:53:51-08:00 Huawei %%01IFNET/4/LINK_STATE(l)[3]:The line protocol
IP on the interface GigabitEthernet0/0/1 has entered the UP state.
[Huawei-GigabitEthernet0/0/1]
[Huawei-GigabitEthernet0/0/1]q
[Huawei]acl name neiwang basic                    //定义一个基本的名称为neiwang的acl
[Huawei-acl-basic-neiwang]rule permit source 192.168.0.0 0.0.255.255   //规则为允许来自192.168的IP数据通过该接口
[Huawei-acl-basic-neiwang]q
[Huawei]nat ?                           //通过此方法查看nat命令
  address-group    IP address-group of NAT
  alg              Application level gateway
  dns-map          DNS mapping
  filter-mode      NAT filter mode
  link-down        Link down reset session function
  mapping-mode     NAT mapping mode
  overlap-address Overlap address pool to temp address pool map
  static           Specify static NAT
[Huawei]nat address-group 1 64.1.1.2 64.1.1.6               //设定一个nat地址池编号为1 允许内网用户使用2到6IP地址
[Huawei]dis acl all                           //查看当前配置的所有acl
Total quantity of nonempty ACL number is 1