新手用ENSP做静态NAT实验，配置上了始终不通，求大神指教下！！

wjhh

这是我的拓扑图

下面是配置：
[V200R003C00]
#
sysname R1
#
snmp-agent local-engineid 800007DB03000000000000
snmp-agent
#
clock timezone China-Standard-Time minus 08:00:00
#
portal local-server load flash:/portalpage.zip
#
drop illegal-mac alarm
#
wlan ac-global carrier id other ac id 0
#
set cpu-usage threshold 80 restore 75
#
aaa
authentication-scheme default
authorization-scheme default
accounting-scheme default
domain default
domain default_admin
local-user admin password cipher %$%$K8m.Nt84DZ}e#<0`8bmE3Uw}%$%$
local-user admin service-type http
#
firewall zone Local
priority 15
#
interface GigabitEthernet0/0/0
ip address 192.168.31.1 255.255.255.0
#
interface GigabitEthernet0/0/1
ip address 12.1.1.1 255.255.255.0
nat static global 12.1.1.2 inside 192.168.31.2 netmask 255.255.255.255
#
interface GigabitEthernet0/0/2
#
interface NULL0
#
user-interface con 0
authentication-mode password
user-interface vty 0 4
user-interface vty 16 20
#
wlan ac
#
return

另一个路由配置
[V200R003C00]
#
sysname R2
#
snmp-agent local-engineid 800007DB03000000000000
snmp-agent
#
clock timezone China-Standard-Time minus 08:00:00
#
portal local-server load flash:/portalpage.zip
#
drop illegal-mac alarm
#
undo info-center enable
#
wlan ac-global carrier id other ac id 0
#
set cpu-usage threshold 80 restore 75
#
aaa
authentication-scheme default
authorization-scheme default
accounting-scheme default
domain default
domain default_admin
local-user admin password cipher %$%$K8m.Nt84DZ}e#<0`8bmE3Uw}%$%$
local-user admin service-type http
#
firewall zone Local
priority 15
#
interface GigabitEthernet0/0/0
ip address 12.1.1.6 255.255.255.0
#
interface GigabitEthernet0/0/1
#
interface GigabitEthernet0/0/2
#
interface NULL0
#
interface LoopBack0
ip address 9.9.9.9 255.255.255.0
#
user-interface con 0
authentication-mode password
user-interface vty 0 4
user-interface vty 16 20
#
wlan ac
#
return

我是看网上的教学视频跟着做的 但是就是PC1始终ping不通12.1.1.6

wyang9311

R１上应该配置NAT，但是看不出在哪里？

wjhh

在R1上gi1

wjhh

wyang9311 发表于 2016-12-27 22:27
R１上应该配置NAT，但是看不出在哪里？

在gi1上配置了一条我看教学视频是这么配的

zhysq45666

路由没写啊

wyang9311

R１上， 用show ip nat translations和 show ip nat statistics 指令分别看一下.

wyang9311

应该为
interface GigabitEthernet0/0/1
ip address 12.1.1.1 255.255.255.0
nat static inside source 192.168.31.2 12.1.1.2

wyang9311

或者用PAT / NAT Overload:

1)interface GigabitEthernet0/0/0
  ip address 192.168.31.1 255.255.255.0
  ip nat inside


2)interface GigabitEthernet0/0/1
  ip address 12.1.1.1 255.255.255.0
  ip nat outside

3)access-list 1 permit 192.168.31.2
  access-list 1 permit 192.168.31.3

4)ip nat inside source list 1 interface Ge0/0/1 overload

LisOne

应该就是路由没有配置

wjhh

zhysq45666 发表于 2016-12-27 23:12
路由没写啊

配置了静态NAT就不需要路由了吧，我看的视频里就没有配置路由

233397700

楼主顶起

wjhh

LisOne 发表于 2016-12-28 08:29
应该就是路由没有配置

我看的视频上也没做路由呀……不知道怎么回事

wjhh

wjhh 发表于 2016-12-28 10:46
我看的视频上也没做路由呀……不知道怎么回事

而且我现在ping网关也不可达...

LisOne

ping网关不可达？你在汇聚上配置vlan intface，配置同网段的地址，看是否可达？如果这不可达，汇聚交换机配置就有问题

anne03421

人家都说了是华为ENSP！！！

静态NAT配的没毛病   

ping不同网关？ PC1上记得要配网关192.168.31.1