Physical Lab 6

Using Cisco IOS 15.1(4)M10, Cisco ISR1841 box.

en
conf t
!
! ip configuration
int f0/1
ip addr 192.168.10.210 255.255.255.0
no shut
exit
int f0/0
ip addr 172.16.2.1 255.255.255.0
no shut
exit
!
! default route
ip route 0.0.0.0 0.0.0.0 192.168.10.1
!
end

conf t
!
ip nat pool PG1X-NAT-POOL 192.168.10.211 192.168.10.212 netmask 255.255.255.248
!
access-list 1 permit 172.16.2.11
access-list 1 permit 172.16.2.12
access-list 1 permit 172.16.2.13
!
ip nat inside source list 1 pool PG1X-NAT-POOL
!
int f0/1
ip nat outside
exit
!
int f0/0
ip nat inside
exit
!
end

pi@pi1:~ $ nc 160.16.63.136 80
GET /
pi@pi2:~ $ nc 160.16.63.136 80
GET /
pi@pi3:~ $ nc 160.16.63.136 80
GET /

R1#sh ip nat t ve
Pro Inside global      Inside local       Outside local      Outside global
--- 192.168.10.211     172.16.2.11        ---                ---
    create 23:10:40, use 05:35:51 timeout:86400000, left 18:24:08, Map-Id(In): 1,
    flags:
none, use_count: 0, entry-id: 1, lc_entries: 0
--- 192.168.10.212     172.16.2.12        ---                ---
    create 23:10:36, use 05:35:51 timeout:86400000, left 18:24:08, Map-Id(In): 1,
    flags:
none, use_count: 0, entry-id: 3, lc_entries: 0
R1#sh ip nat t ve
Pro Inside global      Inside local       Outside local      Outside global
--- 192.168.10.211     172.16.2.11        ---                ---
    create 23:10:41, use 05:35:52 timeout:86400000, left 18:24:07, Map-Id(In): 1,
    flags:
none, use_count: 0, entry-id: 1, lc_entries: 0
--- 192.168.10.212     172.16.2.12        ---                ---
    create 23:10:38, use 05:35:52 timeout:86400000, left 18:24:07, Map-Id(In): 1,
    flags:
none, use_count: 0, entry-id: 3, lc_entries: 0
R1#sh ip nat t
Pro Inside global      Inside local       Outside local      Outside global
--- 192.168.10.211     172.16.2.11        ---                ---
--- 192.168.10.212     172.16.2.12        ---                ---
R1#clear ip nat t *
R1#sh ip nat t
R1#

conf t
!
access-list 1 permit 172.16.2.0 0.0.0.255
!
ip nat inside source list 1 interface f0/1 overload
!
int f0/0
ip nat inside
exit
int f0/1
ip nat outside
exit
!
end

pi@pi1:~ $ nc 160.16.63.136 80
GET /
pi@pi2:~ $ nc 160.16.63.136 80
GET /
pi@pi3:~ $ nc 160.16.63.136 80
GET /

R1#sh ip nat translations
Pro Inside global      Inside local       Outside local      Outside global
--- 192.168.10.211     172.16.2.11        ---                ---
--- 192.168.10.212     172.16.2.12        ---                ---
R1#sh ip nat translations
Pro Inside global      Inside local       Outside local      Outside global
tcp 192.168.10.211:50321 172.16.2.11:50321 160.16.63.136:80  160.16.63.136:80
--- 192.168.10.211     172.16.2.11        ---                ---
--- 192.168.10.212     172.16.2.12        ---                ---
R1#sh ip nat translations
Pro Inside global      Inside local       Outside local      Outside global
--- 192.168.10.211     172.16.2.11        ---                ---
--- 192.168.10.212     172.16.2.12        ---                ---
R1#sh ip nat translations verbose
Pro Inside global      Inside local       Outside local      Outside global
--- 192.168.10.211     172.16.2.11        ---                ---
    create 00:07:55, use 00:05:41 timeout:86400000, left 23:54:18, Map-Id(In): 1,
    flags:
none, use_count: 0, entry-id: 1, lc_entries: 0
--- 192.168.10.212     172.16.2.12        ---                ---
    create 00:07:51, use 00:07:51 timeout:86400000, left 23:52:08, Map-Id(In): 1,
    flags:
none, use_count: 0, entry-id: 3, lc_entries: 0
R1#sh ip nat t ver
Pro Inside global      Inside local       Outside local      Outside global
--- 192.168.10.211     172.16.2.11        ---                ---
    create 00:07:59, use 00:05:45 timeout:86400000, left 23:54:14, Map-Id(In): 1,
    flags:
none, use_count: 0, entry-id: 1, lc_entries: 0
--- 192.168.10.212     172.16.2.12        ---                ---
    create 00:07:56, use 00:07:56 timeout:86400000, left 23:52:03, Map-Id(In): 1,
    flags:
none, use_count: 0, entry-id: 3, lc_entries: 0

1. NAT変換エントリのクリア、タイムアウト値の変更