BHBIN-R_08_NAT(v2.0)

BHBIN—NAT8-1Copyright©2003,.Copyright©2003,BHBIN-R-8••BHBIN—NAT8-2Copyright©2003,.Copyright©2003,BHBIN-R-8•NATIP•NAT••IP•InsideOutsideNATInternetSA192.168.0.1SA192.168.0.1SA61.129.78.23SA61.129.78.23•10.0.0.0-10.255.255.255172.16.0.0-172.31.255.255192.168.0.0-192.168.255.255•IP•BHBIN—NAT8-3Copyright©2003,.Copyright©2003,BHBIN-R-8•–IP––internet–IP•––IP–BHBIN—NAT8-4Copyright©2003,.Copyright©2003,BHBIN-R-8•NAT192.168.0.1202.106.0.1ABPacket1Source=192.168.0.1Destination=61.0.0.1Packet1Source=192.168.0.1Destination=61.0.0.1Packet1Source=202.106.0.1Destination=61.0.0.1Packet1Source=202.106.0.1Destination=61.0.0.1Packet2Source=61.0.0.1Destination=202.106.0.1Packet2Source=61.0.0.1Destination=202.106.0.1Packet2Source=61.0.0.1Destination=192.168.0.1Packet2Source=61.0.0.1Destination=192.168.0.1•NATNetworkAddressTranslationNATIPAB202.106.0.1BIP202.106.0.1B202.106.0.1AIP192.168.0.1BABHBIN—NAT8-5Copyright©2003,.Copyright©2003,BHBIN-R-8=192.168.0.1Destination=10.0.0.1Packet1Source=192.168.0.1Destination=10.0.0.1Packet1Source=202.0.0.1Destination=61.0.0.1Packet1Source=202.0.0.1Destination=61.0.0.1Packet2Source=61.0.0.1Destination=202.0.0.1Packet2Source=61.0.0.1Destination=202.0.0.1Packet2Source=10.0.0.1Destination=192.168.0.1Packet2Source=10.0.0.1Destination=192.168.0.1•NATIPM380#showipnattranslationsProInsideglobalInsidelocalOutsidelocalOutsideglobal6202.0.0.1:3506192.168.0.1:350610.0.0.1:2161.0.0.1:21M380#showipnattranslationsProInsideglobalInsidelocalOutsidelocalOutsideglobal6202.0.0.1:3506192.168.0.1:350610.0.0.1:2161.0.0.1:21NATM380#showrunhostnameM380interfaceeth1/0ipaddress192.168.0.254/24ipnatinsideinterfaceeth8/0ipaddress61.0.0.254/8ipnatoutsideipnatonipnatinsidesourcestatic192.168.0.1202.0.0.1ipnatoutsidesourcestatic61.0.0.110.0.0.1BHBIN—NAT8-6Copyright©2003,.Copyright©2003,BHBIN-R-8•insidelocal–•insideglobal–•outsidelocal–•outsideglobal–•addresspool–M380#showipnattranslationsProInsideglobalInsidelocalOutsidelocalOutsideglobal6202.0.0.1:3506192.168.0.1:350610.0.0.1:2161.0.0.1:21M380#showipnattranslationsProInsideglobalInsidelocalOutsidelocalOutsideglobal6202.0.0.1:3506192.168.0.1:350610.0.0.1:2161.0.0.1:21Copyright©2003,BHBIN-R-8*:0x34a0df0insideinitiatedconnection---proto1(192.168.0.1)-(10.0.0.1)pool(61.0.0.1-61.0.0.1)NAT*:0x34a0df0dodnat---proto1(10.0.0.1)(61.0.0.1)NAT*:0x34a0df0state=newdirection=originalhook=preroutingpacket'sdestinationaddresschanged---proto1(10.0.0.1)(61.0.0.1)NAT*:0x34a0df0insideinitiatedconnection---proto1(192.168.0.1)-(61.0.0.1)pool(202.0.0.1-202.0.0.1)NAT*:0x34a0df0dosnat---proto1(192.168.0.1)(202.0.0.1)NAT*:0x34a0df0state=newdirection=originalhook=postroutingpacket'ssourceaddresschanged---proto1(192.168.0.1)(202.0.0.1)NAT*:0x34a0df0state=establisheddirection=replyhook=preroutingpacket'sdestinationaddresschanged---proto1(202.0.0.1)(192.168.0.1)NAT*:0x34a0df0state=establisheddirection=replyhook=postroutingpacket'ssourceaddresschanged---proto1(61.0.0.1)(10.0.0.1)NAT*:0x34a0df0closedM380#debugipnatM380#NAT*:0x34a0df0insideinitiatedconnection---proto1(192.168.0.1)-(10.0.0.1)pool(61.0.0.1-61.0.0.1)NAT*:0x34a0df0dodnat---proto1(10.0.0.1)(61.0.0.1)NAT*:0x34a0df0state=newdirection=originalhook=preroutingpacket'sdestinationaddresschanged---proto1(10.0.0.1)(61.0.0.1)NAT*:0x34a0df0insideinitiatedconnection---proto1(192.168.0.1)-(61.0.0.1)pool(202.0.0.1-202.0.0.1)NAT*:0x34a0df0dosnat---proto1(192.168.0.1)(202.0.0.1)NAT*:0x34a0df0state=newdirection=originalhook=postroutingpacket'ssourceaddresschanged---proto1(192.168.0.1)(202.0.0.1)NAT*:0x34a0df0state=establisheddirection=replyhook=preroutingpacket'sdestinationaddresschanged---proto1(202.0.0.1)(192.168.0.1)NAT*:0x34a0df0state=establisheddirection=replyhook=postroutingpacket'ssourceaddresschanged---proto1(61.0.0.1)(10.0.0.1)NAT*:0x34a0df0closedNATBHBIN—NAT8-7Copyright©2003,.Copyright©2003,BHBIN-R-8•internet•sessionInternetInside10.1.1.110.1.1.210.1.1.3199.48.7.1SA10.1.1.1SA10.1.1.11110.1.1.2:172310.1.1.1:1024NATtable202.106.0.1:1723202.106.0.1:1024199.48.7.1:23199.48.7.1:23TCPTCP10.1.1.3:1723202.106.0.1:1492199.48.7.1:23TCPInsideGlobalIPAddress:PortOutsideGlobalIPAddress:PortProtocolInsideLocalIPAddress:Port622SA202.106.0.1SA202.106.0.133DA202.106.0.1DA202.106.0.144DA10.1.1.1DA10.1.1.155OutsideCopyright©2003,BHBIN-R-8••NATtableInsideGlobalIPAddress:Port61.1.1.127:8061.1.1.127:8061.1.1.127:80OutsideGlobalIPAddress:Port199.48.7.1:3058202.74.3.9:4371199.48.7.1:3062ProtocolTCPTCPTCPInsideLocalIPAddress:Port10.1.1.1:8010.1.1.2:8010.1.1.3:806Inside10.1.1.110.1.1.210.1.1.3199.48.7.1SA61.1.1.127SA61.1.1.12755DA61.1.1.127DA61.1.1.12711DA10.1.1.1DA10.1.1.133Outside22SA10.1.1.1SA10.1.1.144VirtualServer61.1.1.127VirtualServer61.1.1.127HTTPInternetBHBIN—NAT8-8Co