思科Cisco 5505防火墙映射配置,求教各位大神!

2025-01-04 13:26:21
推荐回答(3个)
回答1:

Interface fastethernet0/0
Ip address 192.168.1.10 255.255.255.0
Ip nat inside

Interface fastethernet0/1
Ip address 10.10.20.10 255.255.255.129
Ip nat outside

Access-list 1 permit 192.168.1.0 0.0.0.255
Ip nat inside source list 1 interface fastethernet0/1 overload
Ip nat inside source static tcp 192.168.1.10 80 10.10.20.10 80

设置成功后,使用show ip nat translations global可以看到刚才的配置是否生效
Pro Inside global Inside local Outside local Outside global
tcp 202.99.220.130:80 192.168.1.2:80 --- ---

我回答了一个相同的问题,不知道是不是都是你发的,如果是你发的有什么不懂的可以私信联系我帮你处理

回答2:

object network inside-outside-trans
range 10.10.20.10 10.10.20.13
object network inside-outside-all
subnet 0.0.0.0 0.0.0.0
object network internet
host (外网网关)
object network 1
host 192.168.1.10
object network 2
host 192.168.1.11
......
object network inside-outside-all
nat (inside,outside) static inside-outside-trans
object network 1(和上面那个1是一样的)
nat(inside,outside) static internet service tcp(应用的端口号)
object network 2(和上面那个2是一样的)
nat(inside,outside) static internet service tcp(应用的端口号)
......
access-group nat in interface outside
(这里的OUTSIDE是我对互联网出口端口的命名,你可以自己命名其它)

回答3:

ASA映射要看版本,7.0~8.3是一种配置方法,8.4~9.0是另一种配置方法