大家帮我看看nat配置有没有问题

来源:百度知道 编辑:UC知道 时间:2024/06/16 17:00:22
cisco2811 现在这两端之间ping不通
outer#show running-config
Building configuration...

Current configuration : 566 bytes
!
version 12.3
no service password-encryption
!
hostname Router
!
!
!
!
interface FastEthernet0/0
ip address 10.0.0.1 255.0.0.0
ip nat inside
duplex auto
speed auto
!
interface FastEthernet0/1
ip address 172.16.1.1 255.255.255.0
ip nat outside
duplex auto
speed auto
!
interface Vlan1
no ip address
shutdown
!
ip nat pool aaa 10.0.0.5 10.0.0.10 netmask 255.255.255.0
ip nat inside source list 1 pool aaa overload
ip classless
ip route 0.0.0.0 0.0.0.0 172.16.1.0
!
access-list 1 permit 211.166.121.0 0.0.0.255
!
!
!
line con 0
line vty 0 4
login
!
!
end

我内部主机的网关设成多少?

ip route 0.0.0.0 0.0.0.0 172.16.1.0
default route有问题
access-list 1 permit 211.166.121.0 0.0.0.255
这个访问列表有问题
nat inside和nat outside反了

找下这三个问题

ip地址池的掩码配错了:
ip nat pool aaa 10.0.0.5 10.0.0.10 netmask 255.255.255.248