华为路由器：配置静态一对一NAT示例

华为路由器：配置静态一对一NAT示例

组网需求
如图所示，路由器的出接口GE2/0/0的IP地址为2.2.2.2/24，LAN侧网关地址为192.168.0.1/24。对端运营商侧地址为2.2.2.1/24。该主机内网地址为192.168.0.2/24需要使用的固定地址为2.2.2.3/24。要求公司内部能够把私网地址转换为公网地址，连接到广域网。
配置静态一对一NAT组网图

配置思路
采用如下思路配置静态一对一NAT：
    配置接口IP地址、缺省路由并且在WAN侧接口下配置NAT Static，实现内外网地址的一对一映射。
操作步骤
在Router上配置接口IP地址
    <Huawei> system-view
    [Huawei] sysname Router
    [Router] interface gigabitethernet 2/0/0
    [Router-GigabitEthernet2/0/0] ip address 2.2.2.2 24  
    [Router-GigabitEthernet2/0/0] quit       
    [Router] interface gigabitethernet 1/0/0
    [Router-GigabitEthernet1/0/0] ip address 192.168.0.1 24  
    [Router-GigabitEthernet1/0/0] quit
    在Router上配置缺省路由，指定下一跳地址为2.2.2.1
    [Router] ip route-static 0.0.0.0 0.0.0.0 2.2.2.1
    在Router的上行接口GE2/0/0上配置一对一的NAT映射
    [Router] interface gigabitethernet 2/0/0
    [Router-GigabitEthernet2/0/0] nat static global 2.2.2.3 inside 192.168.0.2
    [Router-GigabitEthernet2/0/0] quit

验证配置结果
    在Router上执行display nat static命令查看地址池映射关系。
    <Router> display nat static
      Static Nat Information:                                                       
      Interface  : GigabitEthernet2/0/0                                                    
        Global IP/Port     : 2.2.2.3/----                                        
        Inside IP/Port     : 192.168.0.2/----                                       
        Protocol : ----                                                             
        VPN instance-name  : ----                                                   
        Acl number         : ----                                                   
        Vrrp id            : ----                                                   
        Netmask  : 255.255.255.255                                                  
        Description : ----                                                                                                                         
      Total :    1                                                                  

配置文件
Router的配置文件
#
 sysname Router
#
interface GigabitEthernet1/0/0                                                         
 ip address 192.168.0.1 255.255.255.0                                           
#                                                                               
interface GigabitEthernet2/0/0                                                  
 ip address 2.2.2.2 255.255.255.0                                            
 nat static global 2.2.2.3 inside 192.168.0.2 netmask 255.255.255.255
#                                                                               
 ip route-static 0.0.0.0 0.0.0.0 2.2.2.1                                     
#
return