DDN专线连接Internet

 

router------------DDN------------ISP(Internet)

 

所选路由器为cisco1721，配置一块WIC-1T同步串口卡，用于DDN的接入。

 

//router a

service timestamps debug uptime

service timestamps log uptime

service password-encryption

no service tcp-small-servers

no service udp-small-servers

 

hostname routea

ena pass cisco

no ip name-server

no ip domain-lookup

ip subnet-zero

 

int fa0

  no shut

  description connected to lan

  ip addr 192.168.10.254 255.255.255.0

  ip nat inside

  keepalive 10

 

int s0

  no shut

  description connected to internet

  ip addr 192.168.1.1 255.255.255.252

  ip nat outside

  encap ppp

 

access-list 1 permit 192.168.10.0 0.0.0.255

ip nat translation timeout 86400  //配置静态地址转换的失效时间，默认为值86400秒

 

ip nat pool xxx 202.96.38.4 202.96.38.6 netmask 255.255.255.248

//定义从ISP那里申请到的公网IP地企业内部的分配策略，这里定义了一个地址池XXX，它所涵盖的地址将被内网用户用来上网。

 

ip nat inside source list 1 pool xxx overload

//将访问控制列表1与地址池xxx对应，即如果PCA将网关指向192.168.10.254，当它上网时，它的内网地址192.168.10.1将被转换为202.96.38.4至202.96.38.6中的一个。

 

ip classless

 

ip route 0.0.0.0 0.0.0.0 s0

 

no ip http server

snmp-server community public RO

no snmp-server loction

no snmp-server contact

 

line console 0

  exec-timeout 0 0

  pass cisco

  login

 

line vty 0 4

  pass cisco

  login