NAT¡ÊNetwork Address Translation¡Ë¤È¤Ï¡¢¤½¤Î¥¹¥Ú¥ë¤¬°ÕÌ£¤¹¤ë¤è¤¦¤Ë¡¢¥Í¥Ã¥È¥ï¡¼¥¯¥¢¥É¥ì¥¹¤ÎÊÑ´¹¤Ç¤¹¡£
NAT¤Ê¤ó¤Æ»È¤¦¤È¤¤¢¤ë¤Î¤Ç¤¹¤«¡©
Î㤨¤Ð¡¢2¤Ä¤ÎÉô½ð¤ò¤¯¤Ã¤Ä¤±¤Æ¡¢°ì¤Ä¤Î¥Í¥Ã¥È¥ï¡¼¥¯¤Ë¤·¤¿¤È¤·¤Þ¤¹¡£¤É¤Á¤é¤â192.168.1.0/24¤Î¥Í¥Ã¥È¥ï¡¼¥¯¤Ç¤¹¡£IP¥¢¥É¥ì¥¹¤Î½ÅÊ£¤ÏÀµ¾ï¤ÊÄÌ¿®¤¬¤Ç¤¤Þ¤»¤ó¡£¤«¤È¤¤¤Ã¤Æ¡¢¥×¥ê¥ó¥¿¤ä¤é¥µ¡¼¥Ð¤ä¤é¤Ç¡¢¤¤¤Þ¤µ¤éIP¥¢¥É¥ì¥¹¤òÊѹ¹¤¹¤ë¤Î¤ÏÂ礬¤«¤ê¤È¤·¤Þ¤¹¡£¤½¤Î¤È¤¤Ë¡¢¥¢¥É¥ì¥¹¤òÊÑ´¹¤·¤ÆÄÌ¿®¤¹¤ì¤Ð¤¤¤¤¤Î¤Ç¤¹¡£

Question¡§¤Ç¤Ï¡¢¤³¤Î¾ì¹ç¡¢¤É¤Î¤è¤¦¤ÊNAT¤ÎÀßÄê¤ò¤¹¤ì¤Ð¤¤¤¤¤Ç¤·¤ç¤¦¤«¡£
1¤Ä¤ÎÊýË¡¤Ç¤¹¤¬¡¢R1¤ÈR1¤òÀܳ¤·¤Æ°ì¤Ä¤Î¥Í¥Ã¥È¥ï¡¼¥¯¤Î¤¹¤ëºÝ¤Ë¡¢¤ª¸ß¤¤Áê¼ê¤«¤é¤Ï¡¢°ã¤¦¥¢¥É¥ì¥¹¤Ë¸«¤»¤Þ¤¹¡£
¡¡¥Í¥Ã¥È¥ï¡¼¥¯¡¤Ï172.16.1.0/24
¡¡¥Í¥Ã¥È¥ï¡¼¥¯¢¤Ï172.16.2.0/24
¢¨ÊÒÊý¤À¤±¤Ç¤â¹½¤¤¤Þ¤»¤ó¡£
¤½¤Î¤¿¤á¤Ë¡¢¥ë¡¼¥¿R1¤Ç¤Ï¡¢172.16.1.0/24¤ò192.168.1.0/24¤ËNAT¤·¡¢¥ë¡¼¥¿R2¤Ç¤â172.16.2.0/24¤ò192.168.1.0/24¤Î¥Í¥Ã¥È¥ï¡¼¥¯¤ËNAT¤·¤Þ¤¹¡£

¢£NAT¤òÀßÄꤷ¤Æ¤ß¤¿¡ª
¡Ú¹½À®¡Û
¥¤¥ó¥¿¡¼¥Í¥Ã¥ÈPC¡¡¢Í¡¡¥ë¡¼¥¿¡¡¡¡¢Í¡¡PC¡Ê¤ä¥µ¡¼¥Ð¤Ê¤É¡Ë¤¬Ê£¿ô
203.0.113.2¡¡¡¡¡¡¡¡¡¡203.0.113.1¡¡¡¡¡¡¡¡192.168.1.2
¡¡¡¡¡¡¡¡¡¡¡¡¡¡¡¡¡¡¡¡¡¡¡¡192.168.1.1
¡ÚNAT¥Æ¡¼¥Ö¥ë¡Û
192.168.1.2¢Î10.1.1.2
192.168.1.3¢Î10.1.1.3
¤³¤¦¤¹¤ë¤³¤È¤Ç¡¢192.168.1.0¤Î¥Í¥Ã¥È¥ï¡¼¥¯¤ò¡¢³°Éô¤«¤é¤Ï10.1.1.0/24¤Î¥Í¥Ã¥È¥ï¡¼¥¯¤Ë¸«¤»¤ë¤³¤È¤¬¤Ç¤¤ë¡£¸ø³«¥µ¡¼¥Ð¤Î¤È¤¤Ï¡¢10.1.1.0¤ÎÉôʬ¤¬³ä¤êÅö¤Æ¤é¤ì¤¿¥°¥í¡¼¥Ð¥ë¤Ë¤Ê¤ë¤Î¤Ç¤¢¤í¤¦¡£
¢£Config@1841
¥Ý¥¤¥ó¥È¤È¤Ê¤ëConfig¤òµºÜ¤·¤Þ¤¹¡£
interface FastEthernet0/0
ip address 192.168.1.1 255.255.255.0
ip nat inside
interface FastEthernet0/1
ip address 203.0.113.1 255.255.255.0
ip nat outside
ip nat inside source static 192.168.1.2 10.1.1.2
ip nat inside source static 192.168.1.3 10.1.1.3
¢£NAT¥Æ¡¼¥Ö¥ë
NAT¤ÏIP¤À¤±¤Î¾ðÊó¤ò»ý¤Ä¤Ï¤º¤Ê¤Î¤Ç¡¢°Ê²¼¤Ë¤Ê¤ë¤³¤È¤ò´üÂÔ
Router#show ip nat translations
Pro Inside global Inside local Outside local Outside global
--- 10.1.1.2 192.168.1.2 --- ---
--- 10.1.1.3 192.168.1.3 --- ---
¤·¤«¤·¡¢¼ÂºÝ¤Ë¤Ï¥Ý¡¼¥ÈÈÖ¹æ¤âÊÝ»ý¤·¤Æ¤¤¤¿¡£Ê̤ˡ¢¥Ý¡¼¥ÈÈÖ¹æ¤òÊÑ´¹¤·¤Æ¤¤¤ë¤ï¤±¤Ç¤Ï¤Ê¤¤¤Î¤À¤¬¡¢NAT¤ÈNAPT¤Î°ã¤¤¤¬Ê¬¤«¤ê¤º¤é¤¤¤Ê¤¢¤È¡£
Router#show ip nat translations
Pro Inside global Inside local Outside local Outside global
tcp 10.1.1.2:50663 192.168.1.2:50663 203.0.113.2:443 203.0.113.2:443
tcp 10.1.1.2:50664 192.168.1.2:50664 203.0.113.2:443 203.0.113.2:443
--- 10.1.1.2 192.168.1.2 --- ---
tcp 10.1.1.3:52602 192.168.1.3:52602 203.0.113.2:443 203.0.113.2:443
tcp 10.1.1.3:52603 192.168.1.3:52603 203.0.113.2:443 203.0.113.2:443
tcp 10.1.1.3:52604 192.168.1.3:52604 203.0.113.2:443 203.0.113.2:443
tcp 10.1.1.3:52605 192.168.1.3:52605 203.0.113.2:443 203.0.113.2:443
tcp 10.1.1.3:52606 192.168.1.3:52606 203.0.113.2:443 203.0.113.2:443

NAT¤Ê¤ó¤Æ»È¤¦¤È¤¤¢¤ë¤Î¤Ç¤¹¤«¡©
Î㤨¤Ð¡¢2¤Ä¤ÎÉô½ð¤ò¤¯¤Ã¤Ä¤±¤Æ¡¢°ì¤Ä¤Î¥Í¥Ã¥È¥ï¡¼¥¯¤Ë¤·¤¿¤È¤·¤Þ¤¹¡£¤É¤Á¤é¤â192.168.1.0/24¤Î¥Í¥Ã¥È¥ï¡¼¥¯¤Ç¤¹¡£IP¥¢¥É¥ì¥¹¤Î½ÅÊ£¤ÏÀµ¾ï¤ÊÄÌ¿®¤¬¤Ç¤¤Þ¤»¤ó¡£¤«¤È¤¤¤Ã¤Æ¡¢¥×¥ê¥ó¥¿¤ä¤é¥µ¡¼¥Ð¤ä¤é¤Ç¡¢¤¤¤Þ¤µ¤éIP¥¢¥É¥ì¥¹¤òÊѹ¹¤¹¤ë¤Î¤ÏÂ礬¤«¤ê¤È¤·¤Þ¤¹¡£¤½¤Î¤È¤¤Ë¡¢¥¢¥É¥ì¥¹¤òÊÑ´¹¤·¤ÆÄÌ¿®¤¹¤ì¤Ð¤¤¤¤¤Î¤Ç¤¹¡£

Question¡§¤Ç¤Ï¡¢¤³¤Î¾ì¹ç¡¢¤É¤Î¤è¤¦¤ÊNAT¤ÎÀßÄê¤ò¤¹¤ì¤Ð¤¤¤¤¤Ç¤·¤ç¤¦¤«¡£
¡¡¡¡¡¡¡¡¡¡¡¡¡¡¡¡¡¡¡¡¡¡¡¡¡¡¡¡¡¡¡¡¡¡¡¡¡¡¡¡¡¡¡¡¡¡¡¡¡¡¡¡¡¡¡¡¡¡¡¡¡¡¡¡¡¡¡¡¡¡¡¡¡¡¡¡¡¡¡¡¡¡ ¡¡¡¡¡¡¡¡¡¡¡¡¡¡¡¡¡¡¡¡¡¡¡¡¡¡¡¡¡¡¡¡¡¡¡¡¡¡¡¡¡¡¡Ê¹Í¤¨¤Æ¤ß¤Þ¤·¤ç¤¦¡Ë |
1¤Ä¤ÎÊýË¡¤Ç¤¹¤¬¡¢R1¤ÈR1¤òÀܳ¤·¤Æ°ì¤Ä¤Î¥Í¥Ã¥È¥ï¡¼¥¯¤Î¤¹¤ëºÝ¤Ë¡¢¤ª¸ß¤¤Áê¼ê¤«¤é¤Ï¡¢°ã¤¦¥¢¥É¥ì¥¹¤Ë¸«¤»¤Þ¤¹¡£
¡¡¥Í¥Ã¥È¥ï¡¼¥¯¡¤Ï172.16.1.0/24
¡¡¥Í¥Ã¥È¥ï¡¼¥¯¢¤Ï172.16.2.0/24
¢¨ÊÒÊý¤À¤±¤Ç¤â¹½¤¤¤Þ¤»¤ó¡£
¤½¤Î¤¿¤á¤Ë¡¢¥ë¡¼¥¿R1¤Ç¤Ï¡¢172.16.1.0/24¤ò192.168.1.0/24¤ËNAT¤·¡¢¥ë¡¼¥¿R2¤Ç¤â172.16.2.0/24¤ò192.168.1.0/24¤Î¥Í¥Ã¥È¥ï¡¼¥¯¤ËNAT¤·¤Þ¤¹¡£

¢£NAT¤òÀßÄꤷ¤Æ¤ß¤¿¡ª
¡Ú¹½À®¡Û
¥¤¥ó¥¿¡¼¥Í¥Ã¥ÈPC¡¡¢Í¡¡¥ë¡¼¥¿¡¡¡¡¢Í¡¡PC¡Ê¤ä¥µ¡¼¥Ð¤Ê¤É¡Ë¤¬Ê£¿ô
203.0.113.2¡¡¡¡¡¡¡¡¡¡203.0.113.1¡¡¡¡¡¡¡¡192.168.1.2
¡¡¡¡¡¡¡¡¡¡¡¡¡¡¡¡¡¡¡¡¡¡¡¡192.168.1.1
¡ÚNAT¥Æ¡¼¥Ö¥ë¡Û
192.168.1.2¢Î10.1.1.2
192.168.1.3¢Î10.1.1.3
¤³¤¦¤¹¤ë¤³¤È¤Ç¡¢192.168.1.0¤Î¥Í¥Ã¥È¥ï¡¼¥¯¤ò¡¢³°Éô¤«¤é¤Ï10.1.1.0/24¤Î¥Í¥Ã¥È¥ï¡¼¥¯¤Ë¸«¤»¤ë¤³¤È¤¬¤Ç¤¤ë¡£¸ø³«¥µ¡¼¥Ð¤Î¤È¤¤Ï¡¢10.1.1.0¤ÎÉôʬ¤¬³ä¤êÅö¤Æ¤é¤ì¤¿¥°¥í¡¼¥Ð¥ë¤Ë¤Ê¤ë¤Î¤Ç¤¢¤í¤¦¡£
¢£Config@1841
¥Ý¥¤¥ó¥È¤È¤Ê¤ëConfig¤òµºÜ¤·¤Þ¤¹¡£
interface FastEthernet0/0
ip address 192.168.1.1 255.255.255.0
ip nat inside
interface FastEthernet0/1
ip address 203.0.113.1 255.255.255.0
ip nat outside
ip nat inside source static 192.168.1.2 10.1.1.2
ip nat inside source static 192.168.1.3 10.1.1.3
¢£NAT¥Æ¡¼¥Ö¥ë
NAT¤ÏIP¤À¤±¤Î¾ðÊó¤ò»ý¤Ä¤Ï¤º¤Ê¤Î¤Ç¡¢°Ê²¼¤Ë¤Ê¤ë¤³¤È¤ò´üÂÔ
Router#show ip nat translations
Pro Inside global Inside local Outside local Outside global
--- 10.1.1.2 192.168.1.2 --- ---
--- 10.1.1.3 192.168.1.3 --- ---
¤·¤«¤·¡¢¼ÂºÝ¤Ë¤Ï¥Ý¡¼¥ÈÈÖ¹æ¤âÊÝ»ý¤·¤Æ¤¤¤¿¡£Ê̤ˡ¢¥Ý¡¼¥ÈÈÖ¹æ¤òÊÑ´¹¤·¤Æ¤¤¤ë¤ï¤±¤Ç¤Ï¤Ê¤¤¤Î¤À¤¬¡¢NAT¤ÈNAPT¤Î°ã¤¤¤¬Ê¬¤«¤ê¤º¤é¤¤¤Ê¤¢¤È¡£
Router#show ip nat translations
Pro Inside global Inside local Outside local Outside global
tcp 10.1.1.2:50663 192.168.1.2:50663 203.0.113.2:443 203.0.113.2:443
tcp 10.1.1.2:50664 192.168.1.2:50664 203.0.113.2:443 203.0.113.2:443
--- 10.1.1.2 192.168.1.2 --- ---
tcp 10.1.1.3:52602 192.168.1.3:52602 203.0.113.2:443 203.0.113.2:443
tcp 10.1.1.3:52603 192.168.1.3:52603 203.0.113.2:443 203.0.113.2:443
tcp 10.1.1.3:52604 192.168.1.3:52604 203.0.113.2:443 203.0.113.2:443
tcp 10.1.1.3:52605 192.168.1.3:52605 203.0.113.2:443 203.0.113.2:443
tcp 10.1.1.3:52606 192.168.1.3:52606 203.0.113.2:443 203.0.113.2:443
Copyright (C) 2011¡Á nw.seeeko.com ¥Í¥Ã¥È¥ï¡¼¥¯¥¹¥Ú¥·¥ã¥ê¥¹¥È - ¤»¡¼¤³¤Î¤Ä¤ë¤® -