size com ... ear http in use password term sed

一、實驗拓撲:
技術分享圖片
二、實驗要求:
實驗一:Dinamic Identity NAT
R1、R2都有默認路由,下一跳為ASA對應的接口地址。
實驗二:Static Identity NAT
三、命令部署:
實驗一:
1、清除上個實驗的access-list:
ASA(config)# clear configure access-list
ASA(config)# show access-list

2、Inside內部署Dinamic Identity NAT使得10.1.1.1~10.1.1.100轉換到Outside時,轉換到自身:
ASA(config)# object network in-yuan
ASA(config-network-object)# range 10.1.1.1 10.1.1.100
ASA(config-network-object)# nat (inside,outside) static in-jing
驗證:
R2#telnet 202.100.1.1
Trying 202.100.1.1 ... Open
User Access Verification
Username: aa
Password:
R1>
R1#show users
Line User Host(s) Idle Location

  • 0 con 0 idle 00:00:00
    66 vty 0 aa idle 00:00:07 10.1.1.32
    ASA# show xlate
    1 in use, 1 most used
    Flags: D - DNS, i - dynamic, r - portmap, s - static, I - identity, T - twice
    NAT from inside:10.1.1.2 to outside:10.1.1.32 flags i idle 0:01:00 timeout 1:00:00 //證明是有轉換的,但是轉換後地址不能對應,但是靜態是可以做到對應的。

實驗二:
1、Inside內部署Statc Identity NAT使得10.1.1.2轉換到Outside時,轉換到自身:

ASA(config)# object network in-jing
ASA(config-network-object)# host 10.1.1.2
ASA(config-network-object)# nat (inside,outside) dynamic in-jing

驗證:
R2#telnet 202.100.1.1
Trying 202.100.1.1 ... Open
User Access Verification
Username: aa
Password:
R1>

R1#show users
Line User Host(s) Idle Location

  • 0 con 0 idle 00:00:00
    66 vty 0 aa idle 00:00:03 10.1.1.2
    Static Identity NAT:一般用在有×××的時候用到這種轉換

22-思科防火墻:Dynamic Identity NAT、Static Identity NAT