![](\"https:\/\/4.bp.blogspot.com\/-1oIGARqOP6k\/WvVIwlwLu3I\/AAAAAAAAATQ\/Dgt-EPa001szwWiujC4CxWHj9VazBjGiwCLcBGAs\/s1600\/NATonaStick.PNG\")
<\/a><\/td>\n<\/tr>\n\u30d8\u30a2\u30d4\u30f3NAT\u3084NAT on a Stick \u3068\u547c\u3076\u3089\u3057\u3044\u3002 \u305d\u306e\u305f\u3081, R1\u3067\u306f\u5fc5\u7136\u7684\u306bPBR\u3092\u5229\u7528\u3057\u3066VPC1\u306e\u901a\u4fe1\u3092R2\u3078\u8ee2\u9001\u3059\u308b\u3002<\/p>\n \u203b \u629c\u7c8b R2 Config<\/p>\n \u30d1\u30b1\u30c3\u30c8\u30d5\u30ed\u30fc <\/p>\n @R1<\/b> VPC1\u304b\u3089\u306e\u30c8\u30e9\u30d5\u30a3\u30c3\u30af\u3092R2(NAT\u30dc\u30c3\u30af\u30b9)\u3078\u637b\u3058\u66f2\u3052\u307e\u3059\u3002<\/p>\n @R2<\/b> Loopback\u3092outside\u306b\u6307\u5b9a\u3057\u307e\u3059\u3002<\/div>\n NAT\u8a2d\u5b9a\u3002IOS15\u4ee5\u964d\u306fno-alias\u304c\u5fc5\u8981\u3067\u3059\u3002<\/p>\n global inside\u306e\u30a2\u30c9\u30ec\u30b9\u3092\u81ea\u8eab\u306b\u6301\u305f\u305b\u308b\u305f\u3081Static Route\u3092\u7269\u7406IF\u3078\u6307\u5b9a\u3057\u307e\u3059\u3002 NAT\u5bfe\u8c61\u3068\u306a\u308b\u901a\u4fe1\u3092PBR\u3067Loopback\u30a4\u30f3\u30bf\u30d5\u30a7\u30fc\u30b9(outside IF)\u3078\u9001\u308a\u8fbc\u307f\u307e\u3059\u3002\u3053\u308c\u3067inside-outside\u306b\u507d\u88c5\u3057\u307e\u3059\u3002 <\/p>\n \u901a\u4fe1\u78ba\u8a8d\u3002<\/p>\n \u4f8b\u3048\u3070NAT\u306b\u5bfe\u5fdc\u3057\u3066\u3044\u306a\u3044\u6a5f\u5668(L3SW\u7b49)\u304c\u3042\u3063\u305f\u3068\u3057\u3066, \u305d\u308c\u3067\u3082NAT\u3057\u306a\u304f\u3066\u306f\u306a\u3089\u306a\u3044\u5834\u5408\u3002\u56f3\u306e\u3088\u3046\u306b\u30ef\u30f3\u30a2\u30fc\u30e0\u3067\u30eb\u30fc\u30bf\u3092\u3064\u306a\u3044\u3067NAT\u30dc\u30c3\u30af\u30b9\u3068\u3059\u308b\u69cb\u6210\u304c\u53d6\u308c\u308b\u3002 \u56f3\u3067\u306f\u30eb\u30fc\u30bf\u306e\u30a2\u30a4\u30b3\u30f3\u306b\u306a\u3063\u3066\u3044\u308b\u3051\u308c\u3069, \u2026 \u7d9a\u304d\u3092\u8aad\u3080 »<\/a><\/span><\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"","ping_status":"","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[11,6,42,15,8],"tags":[],"class_list":["post-516","post","type-post","status-publish","format-standard","hentry","category-cisco","category-it","category-nat","category-network","category-8"],"_links":{"self":[{"href":"https:\/\/wp.zassoul.com\/index.php?rest_route=\/wp\/v2\/posts\/516","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/wp.zassoul.com\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/wp.zassoul.com\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/wp.zassoul.com\/index.php?rest_route=\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/wp.zassoul.com\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=516"}],"version-history":[{"count":0,"href":"https:\/\/wp.zassoul.com\/index.php?rest_route=\/wp\/v2\/posts\/516\/revisions"}],"wp:attachment":[{"href":"https:\/\/wp.zassoul.com\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=516"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/wp.zassoul.com\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=516"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/wp.zassoul.com\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=516"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}
Cisco\u30b5\u30a4\u30c8\u3092\u53c2\u7167\u3057\u3066\u691c\u8a3c\u3059\u308b\u3002
\u53c2\u7167URL\uff1a\u30b9\u30c6\u30a3\u30c3\u30af\u4e0a\u306e\u30cd\u30c3\u30c8\u30ef\u30fc\u30af \u30a2\u30c9\u30ec\u30b9\u5909\u63db<\/a><\/p>\n\u69cb\u6210\u6982\u8981<\/h3>\n
\n
<\/ul>\n
<\/ul>\n
Config<\/h3>\n
R1 Config<\/p>\n!
interface Ethernet0\/0
description to R3
ip address 192.168.2.1 255.255.255.0
!
interface Ethernet0\/1
description to R2
ip address 10.10.10.1 255.255.255.0
!
interface Ethernet0\/2
description to R4
ip address 192.168.1.1 255.255.255.0
ip policy route-map PBR
!
ip route 172.16.10.0 255.255.255.0 192.168.1.2
ip route 172.16.20.0 255.255.255.0 192.168.2.2
ip route 172.20.10.0 255.255.255.0 10.10.10.2
!
ip access-list extended PBR
permit ip 172.16.10.0 0.0.0.255 any
!
!
route-map PBR permit 10
match ip address PBR
set ip next-hop 10.10.10.2
!
!<\/pre>\n!
interface Loopback0
ip address 1.1.1.1 255.255.255.255
ip nat outside
ip virtual-reassembly in
!
interface Ethernet0\/0
description to R1
ip address 10.10.10.2 255.255.255.0
ip nat inside
ip virtual-reassembly in
ip policy route-map NAT
!
!
ip nat inside source static network 172.16.10.0 172.20.10.0 \/24 no-alias
ip route 0.0.0.0 0.0.0.0 10.10.10.1
ip route 172.20.10.0 255.255.255.0 Ethernet0\/0
!
ip access-list extended PBR
permit ip 172.16.10.0 0.0.0.255 any
permit ip any 172.20.10.0 0.0.0.255
!
!
route-map NAT permit 10
match ip address PBR
set interface Loopback0
!<\/pre>\n
Cisco\u30eb\u30fc\u30bf\u306b\u304a\u3051\u308bNAT\u306e\u51e6\u7406\u306f\u516c\u5f0f\u30da\u30fc\u30b8\u306b\u3042\u308b\u3068\u304a\u308a\u3002
\u53c2\u8003\uff1aNAT\u306e\u51e6\u7406\u9806\u5e8f<\/a>
\u4eca\u56de\u95a2\u4fc2\u3059\u308b\u7b87\u6240\u3092\u592a\u6587\u5b57\u3067\u3002<\/p>\n\n\n
\n \n \n
\n \n
\n\n
<\/tr>\n<\/tbody>\n<\/table>\n \u30d7\u30c1\u89e3\u8aac <\/h3>\n
NAT\u5909\u63db\u5f8c\u306e\u30a2\u30c9\u30ec\u30b9\u3092R2\u3078\u5411\u3051\u307e\u3059\u3002 <\/p>\nip route 172.16.20.0 255.255.255.0 192.168.2.2
<\/pre>\ninterface Ethernet0\/2
description to R4
ip address 192.168.1.1 255.255.255.0
ip policy route-map PBR
!
!
ip access-list extended PBR
permit ip 172.16.10.0 0.0.0.255 any
!
!
route-map PBR permit 10
match ip address PBR
set ip next-hop 10.10.10.2<\/pre>\n
\u7269\u7406IF\u3092inside\u306b\u6307\u5b9a\u3057\u307e\u3059\u3002<\/p>\ninterface Ethernet0\/0
description to R1
ip address 10.10.10.2 255.255.255.0
ip nat inside
ip virtual-reassembly in
<\/pre>\ninterface Loopback0
ip address 1.1.1.1 255.255.255.255
ip nat outside
ip virtual-reassembly in
<\/pre>\nip nat inside source static network 172.16.10.0 172.20.10.0 \/24 no-alias<\/pre>\n
\u304c, \u3053\u306e\u69cb\u6210\u3067\u306f\u306a\u304f\u3066\u3082\u3044\u3051\u307e\u3057\u305f\u3002(NAT\u306e\u51e6\u7406\u30d5\u30ed\u30fc\u898b\u308b\u3068\u4e0d\u8981\u306a\u6c17\u304c\u3059\u308b\u3093\u3067\u3059\u304c\u672a\u3060\u7406\u89e3\u3067\u304d\u305a\u3002)<\/p>\nip route 172.20.10.0 255.255.255.0 Ethernet0\/0
<\/pre>\ninterface Ethernet0\/0
description to R1
ip address 10.10.10.2 255.255.255.0
ip nat inside
no ip virtual-reassembly in
ip policy route-map NAT
!
!
ip access-list extended PBR
permit ip 172.16.10.0 0.0.0.255 any
permit ip any 172.20.10.0 0.0.0.255
!
!
route-map NAT permit 10
match ip address PBR
set interface Loopback0
!
<\/pre>\nVPCS> ping 172.16.20.1
84 bytes from 172.16.20.1 icmp_seq=1 ttl=251 time=1.802 ms
84 bytes from 172.16.20.1 icmp_seq=2 ttl=251 time=3.606 ms
84 bytes from 172.16.20.1 icmp_seq=3 ttl=251 time=4.168 ms
84 bytes from 172.16.20.1 icmp_seq=4 ttl=251 time=3.517 ms
84 bytes from 172.16.20.1 icmp_seq=5 ttl=251 time=3.150 ms
R2#sh ip nat translations
Pro Inside global Inside local Outside local Outside global
icmp 172.20.10.10:28052 172.16.10.10:28052 172.16.20.1:28052 172.16.20.1:28052
icmp 172.20.10.10:28308 172.16.10.10:28308 172.16.20.1:28308 172.16.20.1:28308
icmp 172.20.10.10:28564 172.16.10.10:28564 172.16.20.1:28564 172.16.20.1:28564
icmp 172.20.10.10:28820 172.16.10.10:28820 172.16.20.1:28820 172.16.20.1:28820
icmp 172.20.10.10:29076 172.16.10.10:29076 172.16.20.1:29076 172.16.20.1:29076
--- 172.20.10.10 172.16.10.10 --- ---
--- 172.20.10.0 172.16.10.0 --- ---
R2#
VPCS> ping 172.20.10.10
84 bytes from 172.20.10.10 icmp_seq=1 ttl=59 time=2.539 ms
84 bytes from 172.20.10.10 icmp_seq=2 ttl=59 time=4.796 ms
84 bytes from 172.20.10.10 icmp_seq=3 ttl=59 time=5.276 ms
84 bytes from 172.20.10.10 icmp_seq=4 ttl=59 time=4.397 ms
84 bytes from 172.20.10.10 icmp_seq=5 ttl=59 time=6.855 ms
VPCS><\/pre>\n\u6ce8\u610f\u70b9<\/h3>\n