静态NAT不工作。得到“请求超时”。消息

Question

我有这个网络，我需要配置NAT，以便让互联网访问VLAN 11和12中的计算机。当我测试从计算机到ISP的两个公共IP地址的连接时，路由器1.1.1.1和2.2.2.1显示Request timed out.消息。数据包转到ISP1路由器，但再也不会回来了。

到目前为止，我的命令如下：

R1

R1(config)#interface serial 0/0/0
R1(config-if)#ip nat inside
R1(config-if)#exit
R1(config)#ip nat inside source static 1.1.1.2 1.1.1.1
R1(config)#ip route 0.0.0.0 0.0.0.0 1.1.1.1
R1(config)#

ISP1

ISP1(config)#interface serial 0/0/0
ISP1(config-if)#ip nat outside
ISP1(config-if)#exit

显示ip nat翻译

R1#show ip nat translations 
Pro  Inside global     Inside local       Outside local      Outside global
---  1.1.1.1           1.1.1.2            ---                ---

R1显示ip路由

R1#show ip route
Codes: L - local, C - connected, S - static, R - RIP, M - mobile, B - BGP
       D - EIGRP, EX - EIGRP external, O - OSPF, IA - OSPF inter area
       N1 - OSPF NSSA external type 1, N2 - OSPF NSSA external type 2
       E1 - OSPF external type 1, E2 - OSPF external type 2, E - EGP
       i - IS-IS, L1 - IS-IS level-1, L2 - IS-IS level-2, ia - IS-IS inter area
       * - candidate default, U - per-user static route, o - ODR
       P - periodic downloaded static route

Gateway of last resort is 1.1.1.1 to network 0.0.0.0

     1.0.0.0/8 is variably subnetted, 2 subnets, 2 masks
C       1.1.1.0/30 is directly connected, Serial0/0/0
L       1.1.1.2/32 is directly connected, Serial0/0/0
     2.0.0.0/30 is subnetted, 1 subnets
O       2.2.2.0/30 [110/66] via 10.1.11.2, 10:08:42, GigabitEthernet0/0
                   [110/66] via 10.1.12.2, 10:08:42, GigabitEthernet0/1
     10.0.0.0/8 is variably subnetted, 6 subnets, 2 masks
C       10.1.11.0/24 is directly connected, GigabitEthernet0/0
L       10.1.11.1/32 is directly connected, GigabitEthernet0/0
C       10.1.12.0/24 is directly connected, GigabitEthernet0/1
L       10.1.12.1/32 is directly connected, GigabitEthernet0/1
O       10.2.21.0/24 [110/2] via 10.1.11.2, 10:08:42, GigabitEthernet0/0
O       10.2.22.0/24 [110/2] via 10.1.12.2, 10:08:42, GigabitEthernet0/1
S*   0.0.0.0/0 [1/0] via 1.1.1.1

ISP1显示ip路由

ISP1#show ip route
Codes: L - local, C - connected, S - static, R - RIP, M - mobile, B - BGP
       D - EIGRP, EX - EIGRP external, O - OSPF, IA - OSPF inter area
       N1 - OSPF NSSA external type 1, N2 - OSPF NSSA external type 2
       E1 - OSPF external type 1, E2 - OSPF external type 2, E - EGP
       i - IS-IS, L1 - IS-IS level-1, L2 - IS-IS level-2, ia - IS-IS inter area
       * - candidate default, U - per-user static route, o - ODR
       P - periodic downloaded static route

Gateway of last resort is not set

     1.0.0.0/8 is variably subnetted, 2 subnets, 2 masks
C       1.1.1.0/30 is directly connected, Serial0/0/0
L       1.1.1.1/32 is directly connected, Serial0/0/0
     2.0.0.0/30 is subnetted, 1 subnets
O       2.2.2.0/30 [110/130] via 1.1.1.2, 00:29:20, Serial0/0/0
     10.0.0.0/24 is subnetted, 4 subnets
O       10.1.11.0/24 [110/65] via 1.1.1.2, 00:29:20, Serial0/0/0
O       10.1.12.0/24 [110/65] via 1.1.1.2, 00:29:20, Serial0/0/0
O       10.2.21.0/24 [110/66] via 1.1.1.2, 00:29:20, Serial0/0/0
O       10.2.22.0/24 [110/66] via 1.1.1.2, 00:29:20, Serial0/0/0

我有点不喜欢社交，所以我不知道我应该提供什么其他的信息。

Answer 1

你似乎对NAT的工作方式感到困惑。你想把你的网络地址翻译成别的东西。NAT被配置，并且只在单个路由器上工作。您的ISP路由器不需要，也不应该有任何NAT配置。

NAT是在本地路由器上配置的。您将在R1上同时拥有内部和外部接口。1.1.1.2接口将是外部接口，10.1.11.1和10.1.12.1接口将是内部接口。您需要翻译10.1.11.0/24和10.1.12.0/24地址。

你也需要小心两个广域网路由器。如果您得到非对称路由(流量从一个WAN路由器退出，但返回另一个WAN路由器)，您的NAT将中断，因为这两个WAN路由器不共享NAT表。