路由器的网络地址转换、管理登陆限制、MAC与IP的帮定

xjc1027

interface FastEthernet0/0\r\n ip address 10.1.5.130 255.255.255.252\r\n ip access-group 102 in\r\n ip access-group 105 out\r\n ip nat outside\r\n duplex auto\r\n speed auto\r\n!\r\ninterface FastEthernet0/1\r\n ip address 158.88.0.254 255.255.0.0\r\n ip access-group 102 in\r\n ip nat inside\r\n speed auto\r\n full-duplex\r\n!\r\nip nat pool globalpool 10.1.5.130 10.1.5.130 netmask 255.255.255.252\r\nip nat inside source list 1 pool globalpool overload\r\nip classless\r\nip route 0.0.0.0 0.0.0.0 10.1.5.129\r\nno ip http server\r\nip pim bidir-enable\r\n!\r\nlogging trap debugging\r\nlogging 158.88.0.224\r\nlogging 158.88.0.222\r\naccess-list 1 permit 158.88.0.222\r\naccess-list 1 permit 158.88.0.223\r\naccess-list 1 permit 158.88.0.224\r\naccess-list 1 permit 158.88.0.2\r\naccess-list 1 permit 158.88.0.1\r\naccess-list 1 permit 158.88.0.15\r\naccess-list 1 permit 158.88.0.18\r\naccess-list 1 permit 158.88.0.28\r\naccess-list 1 permit 158.88.0.48\r\naccess-list 102 permit tcp host 158.88.0.222 host 158.88.0.254 eq telnet\r\naccess-list 102 deny   tcp any host 158.88.0.254 eq telnet\r\naccess-list 102 deny   tcp any host 10.1.5.130 eq telnet\r\naccess-list 102 permit ip any any\r\narp 158.88.0.222 0002.3f70.4116 ARPA\r\narp 158.88.0.223 0004.2306.601d ARPA\r\narp 158.88.0.224 0050.ba7c.adcd ARPA\r\narp 158.88.0.224 0050.ba7c.adcd ARPA\r\narp 158.88.0.2 0001.0345.f79f ARPA\r\narp 158.88.0.1 0004.2306.6062 ARPA\r\narp 158.88.0.15 0004.2310.6aa0 ARPA\r\narp 158.88.0.18 0004.2306.6078 ARPA\r\narp 158.88.0.28 0004.2307.2a82 ARPA\r\narp 158.88.0.48 0004.2306.d10d ARPA\r\n!\r\nline con 0\r\n password 7 120F0A1F1B0F09142B\r\nline 33 48\r\nline aux 0\r\n password 7 07192E44470D1C1516\r\nline vty 0 4\r\n password 7 120F0A1F1B0F09142B

默默

IOS的忘光了，看不懂了

zujuhu

楼主把ip route 0.0.0.0 0.0.0.0 10.1.5.129 换成ip route 0.0.0.0 0.0.0.0 fasteether0/0还能通吗

redwolf

看他的配置应该不是用交叉线连接的，如果交叉线连接，你用F0/0，应该可以通，但是如果是接到了一个交换机上面，肯定不通的！

zujuhu

[quote]原帖由 \"redwolf\"]不能通的！[/quote 发表：\n\r\n为什么不能通

redwolf

我说的不能通前提是他接入到交换机，对于目的地址的MAC地址他没有找到，当然不能通了！

zujuhu

目的地址的MAC地址指的是10.1.5.129 对应的mac地址

redwolf

但是如果指向F0/0，他指向了一个端口！对应的设备没有MAC地址的，不是IP地址，IP地址有对应的MAC地址！

zujuhu

有点明白，为什么用交叉线，用f0/0能通

redwolf

交叉线能直接找到对端的MAC地址！应为对应的是一个网络接口，本身就有MAC地址！