Presentation is loading. Please wait.

Presentation is loading. Please wait.

Fa0/0 ACL NAT Loopback0 DHCP Outside Inside route-map public local Router jednointerface'wy jako serwer DHCP z usługą NAT Autor: Leszek Gorzelnik, Kraków.

Published byDevin Ball Modified over 10 years ago

Similar presentations

Presentation on theme: "Fa0/0 ACL NAT Loopback0 DHCP Outside Inside route-map public local Router jednointerface'wy jako serwer DHCP z usługą NAT Autor: Leszek Gorzelnik, Kraków."— Presentation transcript:

1 fa0/0 ACL NAT Loopback0 DHCP Outside Inside route-map public local Router jednointerface'wy jako serwer DHCP z usługą NAT Autor: Leszek Gorzelnik, Kraków 2007

2 fa0/0 ACL NAT Loopback0 DHCP Outside Inside route-map public local ip dhcp excluded-address 10.188.215.200 ip dhcp excluded-address 10.188.215.1 ip dhcp excluded-address 10.188.215.100 ! ip dhcp pool LOKALNA_215 network 10.188.215.0 255.255.255.0 default-router 10.188.215.1 dns-server 10.10.0.2 10.10.0.3

3 fa0/0 ACL NAT Loopback0 DHCP Outside Inside route-map public local ip dhcp excluded-address 10.188.215.200 ip dhcp excluded-address 10.188.215.1 ip dhcp excluded-address 10.188.215.100 ! ip dhcp pool LOKALNA_215 network 10.188.215.0 255.255.255.0 default-router 10.188.215.1 dns-server 10.10.0.2 10.10.0.3 ip route 0.0.0.0 0.0.0.0 172.27.10.1 Sieć 10.10.0.0 Sieć 10.188.215.0 Sieć 172.27.10.0 brama 172.27.10.1

4 fa0/0 ACL NAT Loopback0 Outside Inside route-map public local interface FastEthernet0/0 ip address 10.188.215.1 255.255.255.0 secondary ip address 172.27.10.3 255.255.255.0 ip access-group 111 in ip nat outside ip policy route-map NAT

5 fa0/0 ACL NAT Loopback0 Outside Inside route-map public local interface FastEthernet0/0 ip address 10.188.215.1 255.255.255.0 secondary ip address 172.27.10.3 255.255.255.0 ip access-group 111 in ip nat outside ip policy route-map NAT access-list 111 permit tcp 10.10.0.0 0.0.255.255 any eq telnet access-list 111 deny tcp any any eq telnet access-list 111 permit icmp 10.188.0.0 0.0.255.255 any access-list 111 permit icmp any any echo-reply access-list 111 deny icmp any any access-list 111 permit tcp 10.10.0.0 0.0.255.255 any eq 3389 access-list 111 deny tcp any any eq 3389 access-list 111 permit tcp 10.10.0.0 0.0.255.255 any eq 5900 access-list 111 deny tcp any any eq 5900 access-list 111 permit ip any any

6 fa0/0 ACL NAT Loopback0 Outside Inside route-map public local interface FastEthernet0/0 ip address 10.188.215.1 255.255.255.0 secondary ip address 172.27.10.3 255.255.255.0 ip access-group 111 in ip nat outside ip policy route-map NAT interface Loopback0 ip address 192.168.215.1 255.255.255.0 ip nat inside

7 fa0/0 ACL NAT Loopback0 Outside Inside route-map public local interface FastEthernet0/0 ip address 10.188.215.1 255.255.255.0 secondary ip address 172.27.10.3 255.255.255.0 ip access-group 111 in ip nat outside ip policy route-map NAT interface Loopback0 ip address 192.168.215.1 255.255.255.0 ip nat inside route-map NAT permit 10 match ip address SiecNAT set interface Loopback0

8 fa0/0 ACL NAT Loopback0 Outside Inside route-map public local interface FastEthernet0/0 ip address 10.188.215.1 255.255.255.0 secondary ip address 172.27.10.3 255.255.255.0 ip access-group 111 in ip nat outside ip policy route-map NAT interface Loopback0 ip address 192.168.215.1 255.255.255.0 ip nat inside route-map NAT permit 10 match ip address SiecNAT set interface Loopback0 ip nat pool TRANSLATOR 172.27.10.3 172.27.10.3 netmask 255.255.255.0 ip nat inside source list SiecNAT pool TRANSLATOR overload ip nat inside source static tcp 10.188.215.100 5900 172.27.10.3 5900 extendable ip nat inside source static tcp 10.188.215.100 3389 172.27.10.3 3389 extendable ip access-list extended SiecNAT permit ip 10.188.215.0 0.0.0.255 any Sieć 10.10.0.0 172.27.10.3

Download ppt "Fa0/0 ACL NAT Loopback0 DHCP Outside Inside route-map public local Router jednointerface'wy jako serwer DHCP z usługą NAT Autor: Leszek Gorzelnik, Kraków."

Similar presentations

IP Addressing Higher Computing. TCP/IP TCP/IP is the communication protocol for the internet. TCP/IP is the communication protocol for the internet. TCP/IP.

IP Addressing Higher Computing. TCP/IP TCP/IP is the communication protocol for the internet. TCP/IP is the communication protocol for the internet. TCP/IP.
© 2004, Cisco Systems, Inc. All rights reserved.

© 2004, Cisco Systems, Inc. All rights reserved.
09999/2106 Practical Experiences Overcoming Firewalls and Limited Bandwidth for H.323 Video Conferencing AREN.

09999/2106 Practical Experiences Overcoming Firewalls and Limited Bandwidth for H.323 Video Conferencing AREN.
1 Linux IP Masquerading Brian Vargyas XNet Information Systems.

1 Linux IP Masquerading Brian Vargyas XNet Information Systems.
Configuring Internet Access for a Network. Overview Options for Connecting a Network to the Internet Configuring Internet Access by Using a Router Configuring.

Configuring Internet Access for a Network. Overview Options for Connecting a Network to the Internet Configuring Internet Access by Using a Router Configuring.
Student Guide www.visioninfosystems.org Access List.

Student Guide Access List.
Access Control Lists. Types Standard Extended Standard ACLs Use only the packets source address for comparison 1-99.

Access Control Lists. Types Standard Extended Standard ACLs Use only the packets source address for comparison 1-99.
© 2006 Cisco Systems, Inc. All rights reserved. Implementing Secure Converged Wide Area Networks (ISCW) Module 6: Cisco IOS Threat Defense Features.

© 2006 Cisco Systems, Inc. All rights reserved. Implementing Secure Converged Wide Area Networks (ISCW) Module 6: Cisco IOS Threat Defense Features.
CCENT Study Guide Chapter 12 Security.

CCENT Study Guide Chapter 12 Security.
Any Questions?.

Any Questions?.
Configuring and Troubleshooting ACLs

Configuring and Troubleshooting ACLs
Network Layer IP: Internet Protocol –Datagram format –IPv4 addressing –ICMP –IPv6.

Network Layer IP: Internet Protocol –Datagram format –IPv4 addressing –ICMP –IPv6.
Mitigating Layer 2 Attacks

Mitigating Layer 2 Attacks
DMZ (De-Militarized Zone)

DMZ (De-Militarized Zone)
DMZ (De-Militarized Zone)

DMZ (De-Militarized Zone)
Route Optimisation RD-CSY3021.

Route Optimisation RD-CSY3021.
06-Sep-2006Copyright (C) 2006 Internet Initiative Japan Inc.1 Prevent DoS using IP source address spoofing MATSUZAKI ‘maz’ Yoshinobu.

06-Sep-2006Copyright (C) 2006 Internet Initiative Japan Inc.1 Prevent DoS using IP source address spoofing MATSUZAKI ‘maz’ Yoshinobu.
192.168.0.0/30 Host Name : R1 Serial 0/0/0.1.2 Host Name : R2 Router Lab 3 : 2 - Routers Connection DTE DCE.

/30 Host Name : R1 Serial 0/0/0.1.2 Host Name : R2 Router Lab 3 : 2 - Routers Connection DTE DCE.
© 2002, Cisco Systems, Inc. All rights reserved..

© 2002, Cisco Systems, Inc. All rights reserved..
© 2006 Cisco Systems, Inc. All rights reserved. ICND v2.3—4-1 Managing IP Traffic with ACLs Scaling the Network with NAT and PAT.

© 2006 Cisco Systems, Inc. All rights reserved. ICND v2.3—4-1 Managing IP Traffic with ACLs Scaling the Network with NAT and PAT.

Similar presentations

Ads by Google