思科防火墙9.1系统 nat配置

1、PAT

Object network inside-outside-all

subnet 0.0.0.0 0.0.0.0

nat (inside,outside) dynamic interface

原有的语法:

nat (inside) 1 0 0

global (outside) 1 interface

2、多公网地址

object network inside-outside-translate

Range 10.1.1.1 10.1.1.100

object network inside-outside-all

subnet 0.0.0.0 0.0.0.0

nat (inside,outside) static inside-outside-translate

原有的语法：

nat (inside) 1 0 0

global (outside) 1 10.1.1.1 10.1.1.100

3、static nat

object network server-static

host 10.1.1.1

object network inside-server

host 200.0.9.10

nat (inside,outside) static server-static

原有语法：

static (inside,outside) 10.1.1.1 200.0.9.10 netmask 255.255.255.255

4、静态端口映射

object network Static-Outside-Address

host 200.1.1.1

object network Static-Inside-Address

host 10.1.1.1

nat (Inside,Outside) static Static-Outside-Address service tcp telnet 23 or

nat (Inside,Outside) static 200.1.1.1 service tcp telnet 23

原有的语法：

static (inside,outside) tcp 200.1.1.1 23 10.1.1.1 23 netmask 255.255.255.255