H3C ADDRESS-GROUP NAT 华三动态地址池转换NOPAT

[r7isp]

#
sysname r7isp
#
interface Serial1/0
ip address 20.0.0.100 255.255.255.0
#
return

[r1]

sysname r1
#
interface Serial1/0
ip address 20.0.0.1 255.255.255.0
#
interface GigabitEthernet0/0
port link-mode route
combo enable copper
ip address 10.0.0.254 255.255.255.0
#
interface GigabitEthernet0/1
port link-mode route
combo enable copper
ip address 10.1.1.254 255.255.255.0
#
user-group system
#
return

[r2pc]

#
sysname r2pc
#
interface GigabitEthernet0/0
port link-mode route
combo enable copper
ip address 10.0.0.1 255.255.255.0
#
ip route-static 0.0.0.0 0 10.0.0.254
#
return

[r3server]

#
sysname r3server
#
interface GigabitEthernet0/1
port link-mode route
combo enable copper
ip address 10.1.1.1 255.255.255.0
#
ip route-static 0.0.0.0 0 10.1.1.254
#
return

[r1]

#
interface Serial1/0
ip address 20.0.0.1 255.255.255.0
nat outbound name snat address-group 10 no-pat
#
acl basic name snat
rule 0 permit source 10.0.0.0 0.0.0.255
rule 5 permit source 10.1.1.0 0.0.0.255
#
nat address-group 10
address 20.0.0.11 20.0.0.19
#
return

—————————————————————————-

注意：nat outbound name snat address-group 10 no-pat

如果内网有更多的PC、SERVER需要访问公网，当动态地址池中的地址使用完后，部分用户将不能正常的进行地址转换，仍需使用端口复用技术，删除no-pat参数 即PAT。

nat outbound name snat address-group 10

—————————————————————————-

验证：在r2pc 和 r3server上ping  r7isp的接口地址20.0.0.100

r1上通过 display nat session verbose 命令查看NAT转换会话表项