我build立了一个GNS3实验室,我正在尝试使用dynamic池进行NAT超载。 请看图表 
我遇到的问题是stream量正确路由从PC1到ISP1或ISP2。 然而,我相信翻译是不行的,因为我在ISP路由器上看到这个。
*Oct 7 16:14:46.211: ICMP: echo reply sent, src 1.1.1.2, dst 192.168.0.101, topology BASE, dscp 0 topoid 0 ISP1# *Oct 7 16:14:48.211: ICMP: echo reply sent, src 1.1.1.2, dst 192.168.0.101, topology BASE, dscp 0 topoid 0
这是我从Edge1的configuration:
interface Loopback0 ip address 167.69.0.1 255.255.0.0 interface GigabitEthernet0/0 ip address 172.16.0.1 255.255.255.0 ip nat inside media-type gbic speed 1000 duplex full negotiation auto ! interface POS1/0 description "ISP1" ip address 1.1.1.1 255.255.255.252 ip nat outside ! interface POS2/0 description "ISP2" ip address 2.2.2.1 255.255.255.252 ip nat outside router eigrp 1 network 172.16.0.0 0.0.0.255 ! router bgp 10001 no synchronization bgp log-neighbor-changes network 167.69.0.0 neighbor 1.1.1.2 remote-as 65100 neighbor 2.2.2.2 remote-as 65200 maximum-paths 2 no auto-summary ip nat pool overloadNAT 167.69.255.1 167.69.255.100 netmask 255.255.255.0 ip nat inside source list 100 pool overloadNAT access-list 100 permit ip 192.168.0.0 0.0.0.255 any log access-list 100 permit icmp 192.168.0.0 0.0.0.255 any log
这是我从Edge1的显示IP路由:
Edge1#show ip route Codes: L - local, C - connected, S - static, R - RIP, M - mobile, B - BGP D - EIGRP, EX - EIGRP external, O - OSPF, IA - OSPF inter area N1 - OSPF NSSA external type 1, N2 - OSPF NSSA external type 2 E1 - OSPF external type 1, E2 - OSPF external type 2 i - IS-IS, su - IS-IS summary, L1 - IS-IS level-1, L2 - IS-IS level-2 ia - IS-IS inter area, * - candidate default, U - per-user static route o - ODR, P - periodic downloaded static route, H - NHRP + - replicated route, % - next hop override Gateway of last resort is not set 1.0.0.0/8 is variably subnetted, 3 subnets, 3 masks B 1.0.0.0/8 [20/0] via 1.1.1.2, 01:15:59 C 1.1.1.0/30 is directly connected, POS1/0 L 1.1.1.1/32 is directly connected, POS1/0 2.0.0.0/8 is variably subnetted, 2 subnets, 2 masks C 2.2.2.0/30 is directly connected, POS2/0 L 2.2.2.1/32 is directly connected, POS2/0 167.69.0.0/16 is variably subnetted, 2 subnets, 2 masks C 167.69.0.0/16 is directly connected, Loopback0 L 167.69.0.1/32 is directly connected, Loopback0 172.16.0.0/16 is variably subnetted, 2 subnets, 2 masks C 172.16.0.0/24 is directly connected, GigabitEthernet0/0 L 172.16.0.1/32 is directly connected, GigabitEthernet0/0 D 192.168.0.0/24 [90/28416] via 172.16.0.3, 02:06:17, GigabitEthernet0/0 [90/28416] via 172.16.0.2, 02:06:17, GigabitEthernet0/0
扩展ACL可能工作,但没有“login”关键字:
问:Cisco IOS NAT是否支持带“log”关键字的ACL?
答:当您configurationCisco IOS NAT进行dynamicNAT转换时,使用ACL来标识可以转换的数据包。 目前的NAT架构不支持带有“log”关键字的ACL。
更多: networking地址转换(NAT)常见问题
答案是将扩展ACL更改为基本
access-list 10 permit 192.168.0.0 0.0.0.255 access-list 11 permit 172.16.0.0 0.0.0.255