I-CISCO 17.X NAT Mayelana Ne-stateless Static

I-CISCO-17-X-NAT-About-Stateless-Static-product

Ulwazi Lomkhiqizo

Imininingwane

  • Igama Lomkhiqizo: Stateless Static NAT
  • Inguqulo: IOS XE Bengaluru 17.4.1a

Imiyalo yokusetshenziswa komkhiqizo

Ilungiselela I-Stateless Static Ngaphakathi nangaphandle kwe-NAT
Ukuze ulungiselele ukuhumusha okumile kwe-NAT okunemephu emile esethwe kokungenasimo, landela lezi zinyathelo

  1. Nika amandla imodi ye-EXEC enelungelo ngokufaka umyalo:
    enable
  2. Faka imodi yokumisa umhlaba wonke ngokufaka umyalo:
    configure terminal
  3. Lungiselela ukuhumusha komthombo ongaphakathi omile we-NAT ngokufaka
    umyalo: ip nat inside source static local-ip global-ip
    stateless
  4. Lungiselela ukuhumusha komthombo ongaphandle omile we-NAT ngokufaka
    umyalo: ip nat outside source static global-ip local-ip
    stateless
  5. Phuma kumodi yokumisa yomhlaba wonke ngokufaka umyalo:
    exit
  6. Londoloza ukucushwa bese uphuma ngokufaka umyalo:
    end

Ilungiselela Ukudluliswa Kwembobo Ye-NAT Ye-stateless Static
Ukuze ulungiselele ukudluliselwa kwembobo ye-NAT emile, landela lezi zinyathelo

  1. Nika amandla imodi ye-EXEC enelungelo ngokufaka umyalo:
    enable
  2. Faka imodi yokumisa umhlaba wonke ngokufaka umyalo:
    configure terminal
  3. Lungiselela ukuhumusha komthombo ongaphakathi omile we-NAT ngembobo
    ukudlulisa ngokufaka umyalo: ip nat inside source
    static local-ip global-ip stateless
  4. Lungiselela ukuhumusha okumile komthombo wangaphandle we-NAT ngembobo
    ukudlulisa ngokufaka umyalo: ip nat outside source
    static global-ip local-ip stateless
  5. Phuma kumodi yokumisa yomhlaba wonke ngokufaka umyalo:
    exit
  6. Londoloza ukucushwa bese uphuma ngokufaka umyalo:
    end

FAQ

  • Yini i-Stateless Static NAT?
    I-Stateless Static NAT ivumela ukuhunyushwa komuntu ngamunye kwamakheli endawo angaphandle kumakheli omhlaba, okuhlanganisa amakheli e-IP nokuhunyushwa kwenombolo yembobo.
  • Iyini inhloso ye-Stateless Static NAT?
    Injongo ye-Stateless Static NAT iwukudala ukuhunyushwa okungaguquki kwamakheli ayimfihlo kuya kumakheli omphakathi, okuvumela ababungazi kunethiwekhi yendawo ukuthi baqalise ithrafikhi kumsingathi ohumushiwe uma kuvunyelwa uhlu lokufinyelela.
  • Uyini umehluko phakathi kwe-Stateless and Stateful NAT?
    Ku-NAT Engenasimo, awekho amaseshini adalelwa ukuhamba kwethrafikhi, kuyilapho ku-Stateful NAT, amaseshini adalelwa ukugeleza ngakunye.

Ulwazi Mayelana Ne-stateless Static NAT

  • I-Static Network Address Translation (NAT) ivumela umsebenzisi ukuthi alungiselele ukuhunyushwa komuntu ngamunye kwamakheli endawo angaphakathi kumakheli omhlaba angaphandle. Ivumela kokubili amakheli e-IP nokuhumusha kwenombolo yembobo kusukela ngaphakathi kuya kuthrafikhi yangaphandle nangaphandle kuya kuthrafikhi yangaphakathi.
  • I-Static NAT idala ukuhunyushwa okungaguquki kwamakheli ayimfihlo kumakheli omphakathi. Ngenxa yokuthi i-NAT engaguquki yabela amakheli ngendlela eyodwa-to-munye, udinga inani elilinganayo lamakheli omphakathi njengamakheli ayimfihlo. Ngenxa yokuthi ikheli lomphakathi liyafana ekuxhumekeni ngakunye okulandelanayo ne-NAT emile, futhi kunomthetho wokuhumusha oqhubekayo, i-NAT emile inika amandla abasingathi kunethiwekhi yendawo ukuthi baqalise ithrafikhi kumsingathi ohumushiwe uma kukhona uhlu lokufinyelela oluvumela lokho .

Ekukhishweni kwe-IOS XE Bengaluru 17.4.1a, igama elingukhiye elisha elingenasimo lethulwa ngezinketho zokucushwa kwe-Cisco IOS XE ezimile NAT. Le nketho isebenza kuphela kumyalo omile we-NAT. Uma imephu emile isethelwe kokungenasimo, azikho izikhathi ezidalelwa lokho kugeleza kwethrafikhi.

  • I-NAT Mappings kanye Nokufakwa Kokuhumusha, ekhasini 1
  • Imikhawulo yokuhunyushwa kwekheli lenethiwekhi ye-stateless Static, ekhasini lesi-2
  • Ilungiselela i-Stateless Static NAT, ekhasini lesi-2
  • Ilungiselela i-NAT Eqinile Eqinile nge-Static Stateless NAT Kudivayisi Engafuneki , ekhasini 8
  • Example: Ilungiselela i-Stateless Static NAT , ekhasini 9
  • Ulwazi olufakiwe lwe-Statless Static NAT, ekhasini le-10

I-NAT Mappings kanye Nokufakwa Kokuhumusha

Uma imephu ye-NAT engenasimo ihlangana nokunye ukumepha kwe-NAT okungasho lutho, ukufakwa kokugeleza kwe-NAT kwakhiwa kuthebula lokuhumusha le-NAT. Ithebula elilandelayo lichaza amathuba okudala ukugeleza lapho ukugeleza kufana nokumepha okubili kwe-NAT futhi kuphinda kuncishiswe futhi asikho isimo sokungaphindaphindi.

Ithebula 1: Imephu ye-NAT kanye Nokufakwa Kokuhumusha

Ukwenza imephu 1 nge

Akukho Ukuboleka

Ukwenza imephu 2 nge

Akukho Ukuboleka

Imephu 1

nge Redundancy

Ukwenza imephu 2 nge

I-redundancy

Indalo Egelezayo
Ongenasimo Okushoyo NA NA Yebo
Ongenasimo Ongenasimo NA NA Cha
NA NA Okushoyo Ongenasimo Kokubili okusebenzayo nokubekwe eceleni
Ukwenza imephu 1 nge Akukho Ukuboleka Ukwenza imephu 2 nge Akukho Ukuboleka Imephu 1

nge Redundancy

Ukwenza imephu 2 nge I-redundancy Indalo Egelezayo
NA NA Ongenasimo Ongenasimo Hhayi kukho kokubili okusebenzayo nokubekwe eceleni

Imikhawulo yokuhunyushwa kwekheli lenethiwekhi ye-stateless Static

Imikhawulo elandelayo iyasebenza ku-Stateless Static NAT:

  • I-Stateless Static NAT isekelwa kuphela ku-IPv4.
  • I-Stateless Static NAT isekelwa kuphela kumodi ye-NAT ezenzakalelayo. Uma ushintsha imodi ibe yi-CGN, izohluleka njengoba amamephu angenasimo asevele emisiwe.
  • I-stateless Static NAT ayisekelwe kumephu emile enemephu yomzila.
  • I-Stateless Static NAT ayisekeli ukucutshungulwa kwe-ALG kokumamephu okumile okungasho lutho.

Ilungiselela i-Stateless Static NAT

Ungalungisa i-NAT emile engenasimo kulokhu okulandelayo:

  • Ngaphakathi kwe-NAT emile
  • Ngaphandle kwe-NAT emile
  • Ngaphakathi kwenethiwekhi ye-NAT emile
  • Ngaphandle kwenethiwekhi ye-NAT emile
  • Ngaphakathi kwe-NAT emile ene-PAT
  • Ngaphandle kwe-NAT emile ene-PAT

Ilungiselela I-Stateless Static Ngaphakathi nangaphandle kwe-NAT
Yenza umsebenzi olandelayo ukuze ulungiselele ukuhumusha okumile kwe-NAT okunemephu emile kusethelwe kokungenasimo. Uma usetha imephu emile kokungenasimo, izikhathi azidalelwa lokho kugeleza.

IZINYATHELO ZOKUFINGQA

  1. vumela
  2. lungisa itheminali
  3. ip nat ngaphakathi komthombo i-static local-ip global-ip engenasimo
  4. i-ip nat ngaphandle komthombo i-static global-ip local-ip engenasimo
  5. Phuma
  6. ukuphela

IZINYATHELO EZINEMINININGWANE

Umyalo noma Isenzo Inhloso
Isinyathelo 1 vumela

Example: Irutha> vumela

  • Inika amandla imodi ye-EXEC enelungelo.
  • Faka iphasiwedi yakho uma ucelwa.
Isinyathelo 2 lungisa itheminali

Example: Umzila# lungisa itheminali

Ingena kumodi yokucushwa komhlaba wonke.
Isinyathelo 3 ip nat ngaphakathi komthombo static local-ip global-ip engenasimo

Example: Umzila(config)# ip nat ngaphakathi komthombo omile 10.1.1.1 100.1.1.1 ongenasimo

Isungula ukuhumusha okumile phakathi kwekheli langaphakathi lendawo kanye nekheli langaphakathi lomhlaba jikelele.
Isinyathelo 4 ip nat ngaphandle komthombo static global-ip local-ip engenasimo

Example: Umzila(config)# ip nat ngaphandle komthombo omile 100.1.1.1 10.1.1.1 ongenasimo

Isungula ukuhumusha okumile phakathi kwekheli langaphandle lomhlaba kanye nekheli langaphakathi lendawo.
Isinyathelo 5 Phuma

Example: Irutha(config-uma)# ukuphuma

Iphuma kumodi yokumisa isixhumi esibonakalayo bese ibuyela kumodi yokucushwa komhlaba wonke.
Isinyathelo 6 ukuphela

Example: Irutha(config-if)# end

Iphuma kumodi yokumisa isixhumi esibonakalayo bese ibuyela kumodi ye-EXEC enelungelo.

Ilungiselela Ukudluliswa Kwembobo Ye-NAT Ye-stateless Static
Yenza umsebenzi olandelayo ukuze ulungiselele imbobo yokuhumusha ye-NAT emile ehambisa imephu emile isethwe kokungenasimo. Uma usetha imephu emile kokungenasimo, izikhathi azidalelwa lokho kugeleza.

IZINYATHELO ZOKUFINGQA

  1. vumela
  2. lungisa itheminali
  3. ip nat ngaphakathi komthombo static {tcp|udp} local-ip local-port global-ip global-port extendable Stateless
  4. ip nat outside source static {tcp|udp} global-ip global-port local-ip local-port extendable Stateless
  5. Phuma
  6. ukuphela

IZINYATHELO EZINEMINININGWANE

Umyalo noma Isenzo Inhloso
Isinyathelo 1 vumela

Example:

Irutha> vumela

  • Inika amandla imodi ye-EXEC enelungelo.
  • Faka iphasiwedi yakho uma ucelwa.
Isinyathelo 2 lungisa itheminali

Example: Umzila# lungisa itheminali

Ingena kumodi yokucushwa komhlaba wonke.
Isinyathelo 3 ip nat ngaphakathi komthombo static {tcp|udp} local-ip local-port global-ip global-port enwetshiwe Stateless

Example: Umzila(config)# ip nat ngaphakathi komthombo we-static tcp

10.1.1.1 80 100.11.1.1 8080 enwetshiwe engenasimo

Isungula ukuhumusha okumile phakathi kwekheli langaphakathi lendawo kanye nekheli langaphakathi lomhlaba jikelele.
Isinyathelo 4 ip nat ngaphandle komthombo static {tcp|udp} global-ip global-port local-ip local-port enwetshiwe Stateless

Example:

Umzila(config)# ip nat ngaphandle komthombo we-tcp omile
100.1.1.1 8080 10.1.1.1 80 enwetshiwe engenasimo

Isungula ukuhumusha okumile phakathi kwekheli langaphandle lomhlaba kanye nekheli langaphakathi lendawo.
Isinyathelo 5 Phuma

Example: Irutha(config-uma)# ukuphuma

Iphuma kumodi yokumisa isixhumi esibonakalayo bese ibuyela kumodi yokucushwa komhlaba wonke.
Isinyathelo 6 ukuphela

Example:

Irutha(config-if)# end

Iphuma kumodi yokumisa isixhumi esibonakalayo bese ibuyela kumodi ye-EXEC enelungelo.

Ilungiselela Inethiwekhi Ye-NAT Engenasimo Esingenasimo
Yenza umsebenzi olandelayo ukuze ulungiselele inethiwekhi yokuhumusha ye-NAT emile enemephu emile isethwe kokungenasimo. Uma usetha imephu emile kokungenasimo, izikhathi azidalelwa lokho kugeleza.

IZINYATHELO ZOKUFINGQA

  1. vumela
  2. lungisa itheminali
  3. I-ip nat ngaphakathi komthombo wenethiwekhi emile yendawo-inethiwekhi-imaski global-network-mask Engenasimo
  4. I-ip nat ngaphandle komthombo wenethiwekhi emile global-network-mask local-network-mask
  5. Phuma
  6. ukuphela

IZINYATHELO EZINEMINININGWANE

Umyalo noma Isenzo Inhloso
Isinyathelo 1 vumela

Example:

Irutha> vumela

  • Inika amandla imodi ye-EXEC enelungelo.
  • Faka iphasiwedi yakho uma ucelwa.
Isinyathelo 2 lungisa itheminali

Example: Umzila# lungisa itheminali

Ingena kumodi yokucushwa komhlaba wonke.
Isinyathelo 3 ip nat ngaphakathi komthombo wenethiwekhi emile local-network-mask global-network-mask Ongenasimo

Example: Umzila(config)# ip nat ngaphakathi komthombo wenethiwekhi emile

10.0.0.0 100.1.1.0 /24 ngaphandle kwezwe

Isungula ukuhumusha okumile phakathi kwenethiwekhi yendawo yangaphakathi nenethiwekhi yangaphakathi yomhlaba.
Isinyathelo 4 i-ip nat ngaphandle kwenethiwekhi emile yomthombo iglobal-network-mask local-network-mask Ongenasimo

Example: Umzila(config)# ip nat ngaphandle komthombo wenethiwekhi emile 100.0.0.0 10.1.1.0 /24 stateless

Isungula ukuhumusha okumile phakathi kwenethiwekhi yomhlaba yangaphandle kanye nenethiwekhi yendawo yangaphakathi.
Isinyathelo 5 Phuma

Example: Irutha(config-uma)# ukuphuma

Iphuma kumodi yokumisa isixhumi esibonakalayo bese ibuyela kumodi yokucushwa komhlaba wonke.
Isinyathelo 6 ukuphela

Example: Irutha(config-if)# end

Iphuma kumodi yokumisa isixhumi esibonakalayo bese ibuyela kumodi ye-EXEC enelungelo.

Ilungiselela i-Stateless Static NAT nge-VRF
Yenza umsebenzi olandelayo ukuze ulungiselele ukuhumusha okumile kwe-NAT okunemephu emile kusethelwe kokungenasimo esimweni se-VRF eqaphela i-NAT. Uma usetha imephu emile kokungenasimo, izikhathi azidalelwa lokho kugeleza.

IZINYATHELO ZOKUFINGQA

  1. vumela
  2. lungisa itheminali
  3. I-ip nat ngaphakathi komthombo i-static local-ip global-ip [vrf vrf-name [match-in-vrf ]] Ingenasimo
  4. ip nat ngaphandle umthombo static global-ip local-ip [vrf vrf-igama [match-in-vrf ]] Stateless
  5. Phuma
  6. ukuphela

IZINYATHELO EZINEMINININGWANE

Umyalo noma Isenzo Inhloso
Isinyathelo 1 vumela

Example: Irutha> vumela

  • Inika amandla imodi ye-EXEC enelungelo.
  • Faka iphasiwedi yakho uma ucelwa.
Isinyathelo 2 lungisa itheminali

Example: Umzila# lungisa itheminali

Ingena kumodi yokucushwa komhlaba wonke.
Isinyathelo 3 ip nat ngaphakathi komthombo static     local-ip global-ip [vrf vrf-igama [fanisa-ku-vrf ]] Ongenasimo

Example: Umzila(config)# ip nat ngaphakathi komthombo omile

10.1.1.1 100.11.1.1 vrf vrf1 match-in-vrf engenasimo

Isungula ukuhumusha okumile phakathi kwekheli langaphakathi lendawo kanye nekheli langaphakathi lomhlaba jikelele.
  • I fanisa-ku-vrf Igama elingukhiye linika amandla i-NAT ngaphakathi nangaphandle kwethrafikhi ku-VRF efanayo.
  • I Ongenasimo Igama elingukhiye alikudali okufakiwe okugelezayo kwemephu emile.
Isinyathelo 4 ip nat ngaphandle komthombo static      global-ip local-ip [vrf

vrf-igama [fanisa-ku-vrf ]] Ongenasimo

Example: Umzila(config)# ip nat ngaphandle komthombo omile

100.1.1.1 10.1.1.1 vrf vrf1 match-in-vrf engenasimo

Isungula ukuhumusha okumile phakathi kwekheli langaphandle lomhlaba kanye nekheli langaphakathi lendawo.
  • I fanisa-ku-vrf Igama elingukhiye linika amandla i-NAT ngaphakathi nangaphandle kwethrafikhi ku-VRF efanayo.
  • I Ongenasimo Igama elingukhiye alikudali okufakiwe okugelezayo kwemephu emile.
Isinyathelo 5 Phuma

Example: Irutha(config-uma)# ukuphuma

Iphuma kumodi yokumisa isixhumi esibonakalayo bese ibuyela kumodi yokucushwa komhlaba wonke.
Isinyathelo 6 ukuphela

Example: Irutha(config-if)# end

Iphuma kumodi yokumisa isixhumi esibonakalayo bese ibuyela kumodi ye-EXEC enelungelo.

Ilungiselela i-Stateless Static NAT Nge-Static Stateless Static Static NAT Forwarding
Yenza umsebenzi olandelayo ukuze ulungiselele imbobo emile ye-NAT yokudlulisela phambili nge-VRF enemephu emile isethwe kokungenasimo. Uma usetha imephu emile kokungenasimo, izikhathi azidalelwa lokho kugeleza.

IZINYATHELO ZOKUFINGQA

  1. vumela
  2. lungisa itheminali
  3. ip nat ngaphakathi komthombo static {tcp | udp} local-ip local-port global-ip global-port [vrf vrf-name [match-in-vrf ]] enwetshiwe engenasimo
  4. I-ip nat yangaphandle yomthombo omile {tcp | udp} i-global-ip global-port local-ip local-port [vrf vrf-name [match-in-vrf ]] enwetshiwe engenasimo
  5. Phuma
  6. ukuphela

IZINYATHELO EZINEMINININGWANE

Umyalo noma Isenzo Inhloso
Isinyathelo 1 vumela

Example: Irutha> vumela

  • Inika amandla imodi ye-EXEC enelungelo.
  • Faka iphasiwedi yakho uma ucelwa.
Isinyathelo 2 lungisa itheminali

Example: Umzila# lungisa itheminali

Ingena kumodi yokucushwa komhlaba wonke.
Isinyathelo 3 ip nat ngaphakathi komthombo static {tcp | udp} local-ip local-port global-ip global-port [vrf vrf-igama [fanisa-ku-vrf ]] enwetshiwe engenasimo

Example: Umzila(config)# ip nat ngaphakathi komthombo we-static tcp

10.1.1.1 80 100.11.1.1 8080 vrf 1 match-in-vrf enwetshiwe engenasimo

Isungula ukuhumusha okumile phakathi kwekheli langaphakathi lendawo kanye nekheli langaphakathi lomhlaba jikelele.
  • I fanisa-ku-vrf Igama elingukhiye linika amandla i-NAT ngaphakathi nangaphandle kwethrafikhi ku-VRF efanayo.
  • I Ongenasimo Igama elingukhiye alikudali okufakiwe okugelezayo kwemephu emile.
Isinyathelo 4 ip nat ngaphandle komthombo static {tcp | udp} global-ip global-port local-ip local-port [vrf vrf-igama [fanisa-ku-vrf ]] enwetshiwe engenasimo

Example:

Umzila(config)# ip nat ngaphandle komthombo we-tcp omile
100.1.1.1 8080 10.1.1.1 80 vrf 1 match-in-vrf enwetshiwe engenasimo

Isungula ukuhumusha okumile phakathi kwekheli langaphandle lomhlaba kanye nekheli langaphakathi lendawo.
  • I fanisa-ku-vrf Igama elingukhiye linika amandla i-NAT ngaphakathi nangaphandle kwethrafikhi ku-VRF efanayo.
  • I Ongenasimo Igama elingukhiye alikudali okufakiwe okugelezayo kwemephu emile.
Isinyathelo 5 Phuma

Example: Irutha(config-uma)# ukuphuma

Iphuma kumodi yokumisa isixhumi esibonakalayo bese ibuyela kumodi yokucushwa komhlaba wonke.
Isinyathelo 6 ukuphela

Example: Irutha(config-if)# end

Iphuma kumodi yokumisa isixhumi esibonakalayo bese ibuyela kumodi ye-EXEC enelungelo.

Ilungiselela i-NAT Eqinile Emile nge-Static Stateless NAT Kudivayisi Engafuneki
Yenza umsebenzi olandelayo ukuze ulungiselele ukuhumusha okumile kwe-NAT okunemephu emile kusethelwe kokungenasimo. Uma usetha imephu emile kokungenasimo, izikhathi azidalelwa lokho kugeleza. Kulokhu kucushwa, kumephu emile kuphela kusethwe kokungenasimo. Okufakiwe kokuhumusha kwe-NAT kwakhiwa uma ukugeleza kufana kuzo zombili izitatimende zemephu noma uma kufana nokufaka imephu okucacile kuphela. Kodwa-ke, ngeke idalwe uma ifana nokungena okungenasimo kuphela.

IZINYATHELO ZOKUFINGQA

  1. vumela
  2. lungisa itheminali
  3. ip nat ngaphakathi komthombo i-static local-ip global-ip [vrf vrf-name [redundancy group name [match-in-vrf ]]] engenasimo
  4. ip nat ngaphakathi komthombo i-static local-ip global-ip [vrf vrf-name [redundancy group name match-in-vrf ]]] engenasimo
  5. Phuma
  6. ukuphela

IZINYATHELO EZINEMINININGWANE

Umyalo noma Isenzo Inhloso
Isinyathelo 1 vumela

Example: Irutha> vumela

  • Inika amandla imodi ye-EXEC enelungelo.
  • Faka iphasiwedi yakho uma ucelwa.
Isinyathelo 2 lungisa itheminali

Example: Umzila# lungisa itheminali

Ingena kumodi yokucushwa komhlaba wonke.
Isinyathelo 3 ip nat ngaphakathi komthombo static     local-ip global-ip [vrf vrf-igama [igama leqembu le-redundancy [fanisa-ku-vrf ]]] engenasimo

Example: Umzila(config)# ip nat ngaphakathi komthombo omile

10.180.4.4 10.236.214.218 vrf vrf1 redundancy 1 mapping-id 11 match-in-vrf stateless

Isungula ukuhumusha okumile phakathi kwekheli langaphakathi lendawo kanye nekheli langaphakathi lomhlaba jikelele.
  • I fanisa-ku-vrf Igama elingukhiye linika amandla i-NAT ngaphakathi nangaphandle kwethrafikhi ku-VRF efanayo.
  • I Ongenasimo Igama elingukhiye alikudali okufakiwe okugelezayo kwemephu emile.
Isinyathelo 4 ip nat ngaphakathi komthombo static     local-ip global-ip [vrf vrf-igama [igama leqembu le-redundancy match-in-vrf ]]] engenasimo

Example: Umzila(config)# ip nat ngaphandle komthombo omile
10.180.4.8 10.240.214.220 vrf vrf1 redundancy 1 mapping-id 10 match-in-vrf stateless

Isungula ukuhumusha okumile phakathi kwekheli langaphakathi lendawo kanye nekheli langaphakathi lomhlaba jikelele.
  • I fanisa-ku-vrf Igama elingukhiye linika amandla i-NAT ngaphakathi nangaphandle kwethrafikhi ku-VRF efanayo.
  • I Ongenasimo Igama elingukhiye alikudali okufakiwe okugelezayo kwemephu emile.
Umyalo noma Isenzo Inhloso
Isinyathelo 5 Phuma

Example: Irutha(config-uma)# ukuphuma

Iphuma kumodi yokumisa isixhumi esibonakalayo bese ibuyela kumodi yokucushwa komhlaba wonke.
Isinyathelo 6 ukuphela

Example: Irutha(config-if)# end

Iphuma kumodi yokumisa isixhumi esibonakalayo bese ibuyela kumodi ye-EXEC enelungelo.

Example: Ilungiselela i-Stateless Static NAT

I-stateless Static NAT
I-ex elandelayoampI-le ibonisa indlela yokumisa ukuhumusha okumile okungenasimo ngaphakathi nangaphandle kwe-NAT phakathi kwekheli le-IP lendawo elingu-10.1.1.1 nekheli le-IP yomhlaba wonke elithi 100.1.1.1. Igama elingukhiye elithi Stateless alikudali okufakiwe okugelezayo kwemephu emile.

  • Umzila# lungisa itheminali
  • Umzila(config)# ip nat ngaphakathi komthombo omile 10.1.1.1 100.1.1.1 ongenasimo
  • Umzila(config)# ip nat ngaphandle komthombo omile 100.1.1.1 10.1.1.1 ongenasimo

Stateless Static NAT nge Port Forwarding
I-ex elandelayoampI-le ibonisa indlela yokulungiselela ukuhumusha okungenasimo okumile kokudlulisela phambili imbobo ye-NAT phakathi kwekheli le-IP lasendaweni elingu-10.1.1.1 nekheli le-IP yomhlaba wonke elingu-100.1.1.1. Igama elingukhiye elithi Stateless alikudali okufakiwe okugelezayo kwemephu emile.

  • Umzila# lungisa itheminali
  • Irutha(config)# ip nat ngaphakathi komthombo static tcp 10.1.1.1 80 100.11.1.1 8080 enwebekayo engenasimo
  • Umzila(config)# ip nat ngaphandle komthombo static tcp 100.1.1.1 8080 10.1.1.1 80 enwebekayo engenasimo

Inethiwekhi ye-NAT engapheli
I-ex elandelayoampi-le ikhombisa indlela yokumisa inethiwekhi ye-NAT engenasimo phakathi kwenethiwekhi yendawo yangaphakathi nenethiwekhi yangaphakathi yomhlaba. Igama elingukhiye elithi Stateless alikudali okufakiwe okugelezayo kwemephu emile.

  • Umzila# lungisa itheminali
  • Umzila(config)# ip nat ngaphakathi komthombo wenethiwekhi emile 10.0.0.0 100.1.1.0 /24 Irutha engenasimo(config)# ip nat ngaphandle kwenethiwekhi yomthombo emile 100.0.0.0 10.1.1.0 /24 i-stateless

I-Static Stateless NAT ene-VRF
I-ex elandelayoampI-le ibonisa indlela yokulungisa ukuhumusha okumile kwe-NAT okungenasimo phakathi kwekheli le-IP lendawo elingu-10.1.1.1 nekheli le-IP yomhlaba wonke elingu-100.1.1.1. Igama elingukhiye lokufanisa-in-vrf livumela i-NAT ngaphakathi nangaphandle kwethrafikhi ku-VRF efanayo. Igama elingukhiye elithi Stateless alikudali okufakiwe okugelezayo kwemephu emile.

  • Umzila# lungisa itheminali
  • Umzila(config)# ip nat ngaphakathi komthombo umile 10.1.1.1 100.11.1.1 vrf vrf1 match-in-vrf stateless
  • Umzila(config)# ip nat ngaphandle komthombo umile 100.1.1.1 10.1.1.1 vrf vrf1 match-in-vrf stateless
  • Irutha(config)# Umzila(config-uma)# ukuphela

I-NAT Engenasimo Emiyo ene-Static Stateless Static NAT Port Forwarding
I-ex elandelayoampI-le ibonisa indlela yokulungisa ukuhumusha okumile kwe-NAT okungenasimo phakathi kwekheli le-IP lendawo elingu-10.1.1.1 nekheli le-IP yomhlaba wonke elingu-100.1.1.1. Igama elingukhiye lokufanisa-in-vrf livumela i-NAT ngaphakathi nangaphandle kwethrafikhi ku-VRF efanayo. Igama elingukhiye elithi Stateless alikudali okufakiwe okugelezayo kwemephu emile.

  • Umzila# lungisa itheminali
  • Umzila(config)# ip nat ngaphakathi komthombo static tcp 10.1.1.1 80 100.11.1.1 8080 vrf 1 match-in-vrf extensionablelessless
  • Umzila(config)# ip nat ngaphandle komthombo static tcp 100.1.1.1 8080 10.1.1.1 80 vrf 1 match-in-vrf extensionablelessless
  • Irutha(config)# Umzila(config-uma)# ukuphela

I-NAT Emile Emile ene-Static Stateless NAT kudivayisi-kuya-Kudivayisi HA
I-ex elandelayoampI-le ibonisa indlela yokulungisa i-NAT emile engenasimo enesimo se-NAT emile efana nokugeleza nokuphinda kusetshenziswe idivayisi kuya kudivayisi okunikwe amandla.

  • Umzila# lungisa itheminali
  • ip nat inside source static 10.180.4.4 10.236.214.218 vrf vrf1 redundancy 1 mapping-id 11 match-in-vrf stateless
  • ip nat ngaphandle komthombo omile 10.180.4.8 10.240.214.220 vrf vrf1 redundancy 1 mapping-id 10

Ulwazi Lwesici lwe-Statless Static NAT

Ithebula 2: Ulwazi Lwesici se-Statless Static NAT

Igama Lesici Ukukhishwa Ulwazi Lwesici
I-Statless Static NAT I-Cisco IOS XE Bengaluru 17.4 Igama elingukhiye elisha engenasimo yethulwa ekucushweni kwe-IOS XE okumile NAT.

Amadokhumenti / Izinsiza

I-CISCO 17.X NAT Mayelana Ne-stateless Static [pdf] Incwadi Yeziqondiso
17.X NAT Mayelana Ne-Stateless Static, 17.X, NAT Mayelana Ne-stateless Static, Mayelana Ne-stateless Static, Stateless Static, Static

Izithenjwa

Shiya amazwana

Ikheli lakho le-imeyili ngeke lishicilelwe. Izinkambu ezidingekayo zimakiwe *