写生 2007-11-12 11:44
实验9.11.2 配置BGP和NAT一起使用
[font=宋体][size=3]一、实验拓扑图：[/size][/font]
[font=Times New Roman][size=3] [img]http://p.blog.csdn.net/images/p_blog_csdn_net/ieeenjoy/291908/o_9112.JPG[/img][/size][/font]
[font=宋体][size=3]二、实验目的：[/size][/font]
[size=3][font=Times New Roman] [/font][font=宋体]国际互联网培训中心[/font][font=Times New Roman]ITAA[/font][font=宋体]，从[/font][font=Times New Roman]ISP[/font][font=宋体]获得若干公网[/font][font=Times New Roman]IP(66.122.33.98[/font][font=宋体]—[/font][font=Times New Roman]66.122.33.126)[/font][font=宋体]，现在要实现[/font][font=Times New Roman]ITAA[/font][font=宋体]内所有子公司都要通过此段[/font][font=Times New Roman]IP[/font][font=宋体]接入[/font][font=Times New Roman]Internet[/font][font=宋体]，考虑到[/font][font=Times New Roman]ITAA[/font][font=宋体]组织庞大，影响颇广，[/font][font=Times New Roman]ISP[/font][font=宋体]分配给[/font][font=Times New Roman]ITAA[/font][font=宋体]一个私有[/font][font=Times New Roman]AS[/font][font=宋体]号码[/font][font=Times New Roman]64512[/font][font=宋体]以供独立使用。现在要进行[/font][font=Times New Roman]ITAA[/font][font=宋体]内部路由的配置。[/font][/size]
[font=宋体][size=3]三、具体实验内容：[/size][/font]
[size=3][font=Times New Roman] [/font][font=宋体]步骤：[/font][/size]
[align=center][table=529][tr][td=1,1,568][font=宋体][size=3]－实验基本配置；[/size][/font]
[/td][/tr][tr][td=1,1,568][size=3][font=宋体]－在[/font][font=Times New Roman]ISP[/font][font=宋体]和[/font][font=Times New Roman]ITAA[/font][font=宋体]之间起[/font][font=Times New Roman]BGP,[/font][font=宋体]在[/font][font=Times New Roman]ITAA[/font][font=宋体]和其子公司之间运行[/font][font=Times New Roman]OSPF[/font][font=宋体]；[/font][/size]
[/td][/tr][tr][td=1,1,568][size=3][font=宋体]－在[/font][font=Times New Roman]ITAA[/font][font=宋体]上配置[/font][font=Times New Roman]NAT[/font][font=宋体]地址池，并在接口中正确配置进出参数；[/font][/size]
[/td][/tr][tr][td=1,1,568][size=3][font=宋体]－在[/font][font=Times New Roman]ITAA[/font][font=宋体]上将公网地址发布到[/font][font=Times New Roman]BGP[/font][font=宋体]，使其能和[/font][font=Times New Roman]ISP[/font][font=宋体]互通，接入[/font][font=Times New Roman]Internet[/font][font=宋体]；[/font][/size]
[/td][/tr][tr][td=1,1,568][size=3][font=宋体]－在[/font][font=Times New Roman]ITAA[/font][font=宋体]上配置默认路由，保证下属公司可以成功接入网络；[/font][/size]
[/td][/tr][tr][td=1,1,568][font=宋体][size=3]－整体测试[/size][/font]
[/td][/tr][/table][/align][font=Times New Roman][size=3] [/size][/font]
[font=宋体][size=3]实验基本配置：[/size][/font]
[align=center][table][tr][td][font=Times New Roman][size=3]ISP#sh run[/size][/font]
[font=Times New Roman][size=3]Building configuration...[/size][/font]
[font=Times New Roman][size=3]Current configuration : 1337 bytes[/size][/font]
[font=Times New Roman][size=3]![/size][/font]
[font=Times New Roman][size=3]version 12.3[/size][/font]
[font=Times New Roman][size=3]hostname ISP[/size][/font]
[font=Times New Roman][size=3]![/size][/font]
[font=Times New Roman][size=3]interface Loopback0[/size][/font]
[size=3][font=Times New Roman]
ip address 210.210.210.1 255.255.255.0[/font][/size]
[font=Times New Roman][size=3]![/size][/font]
[font=Times New Roman][size=3]interface Serial1/0[/size][/font]
[size=3][font=Times New Roman]
ip address 192.168.1.5 255.255.255.252[/font][/size]
[size=3][font=Times New Roman]
serial restart-delay 0[/font][/size]
[font=Times New Roman][size=3]![/size][/font]
[font=Times New Roman][size=3]router bgp 200[/size][/font]
[size=3][font=Times New Roman]
no synchronization[/font][/size]
[size=3][font=Times New Roman]
bgp log-neighbor-changes[/font][/size]
[size=3][font=Times New Roman]
network 210.210.210.0[/font][/size]
[size=3][font=Times New Roman]
neighbor 192.168.1.6 remote-as 64512[/font][/size]
[size=3][font=Times New Roman]
no auto-summary[/font][/size]
[size=3][font=Times New Roman]!
[/font][/size]
[font=Times New Roman][size=3]end[/size][/font]
[/td][td][font=Times New Roman][size=3]ITAA#sh run[/size][/font]
[font=Times New Roman][size=3]Building configuration...[/size][/font]
[font=Times New Roman][size=3] [/size][/font]
[font=Times New Roman][size=3]Current configuration : 1848 bytes[/size][/font]
[font=Times New Roman][size=3]![/size][/font]
[font=Times New Roman][size=3]version 12.3![/size][/font]
[font=Times New Roman][size=3]interface Loopback0[/size][/font]
[size=3][font=Times New Roman]
ip address 172.16.64.1 255.255.255.0[/font][/size]
[font=Times New Roman][size=3]![/size][/font]
[font=Times New Roman][size=3]interface Serial1/0[/size][/font]
[size=3][font=Times New Roman]
ip address 172.16.1.1 255.255.255.0[/font][/size]
[font=Times New Roman][size=3]serial restart-delay 0[/size][/font]
[font=Times New Roman][size=3]![/size][/font]
[font=Times New Roman][size=3]interface Serial1/1[/size][/font]
[size=3][font=Times New Roman]
ip address 192.168.1.6 255.255.255.252[/font][/size]
[size=3][font=Times New Roman]
serial restart-delay 0[/font][/size]
[font=Times New Roman][size=3]router ospf 100[/size][/font]
[size=3][font=Times New Roman]
log-adjacency-changes[/font][/size]
[size=3][font=Times New Roman]
network 172.16.1.0 0.0.0.255 area 0[/font][/size]
[size=3][font=Times New Roman]
network 172.16.64.0 0.0.0.255 area 0[/font][/size]
[font=Times New Roman][size=3]![/size][/font]
[font=Times New Roman][size=3]router bgp 64512[/size][/font]
[size=3][font=Times New Roman]
no synchronization[/font][/size]
[size=3][font=Times New Roman]
bgp log-neighbor-changes[/font][/size]
[size=3][font=Times New Roman]
neighbor 192.168.1.5 remote-as 200[/font][/size]
[size=3][font=Times New Roman]
no auto-summary[/font][/size]
[font=Times New Roman][size=3]![/size][/font]
[font=Times New Roman][size=3]end[/size][/font]
[/td][/tr][/table][/align][table][tr][td][font=Times New Roman][size=3]ITAA_SUB#sh run[/size][/font]
[font=Times New Roman][size=3]Building configuration...[/size][/font]
[font=Times New Roman][size=3]Current configuration : 1312 bytes[/size][/font]
[font=Times New Roman][size=3]version 12.3[/size][/font]
[font=Times New Roman][size=3]hostname ITAA_SUB[/size][/font]
[font=Times New Roman][size=3]interface Loopback0[/size][/font]
[size=3][font=Times New Roman]
ip address 172.16.32.1 255.255.255.0[/font][/size]
[font=Times New Roman][size=3]![/size][/font]
[font=Times New Roman][size=3]interface Serial1/1[/size][/font]
[size=3][font=Times New Roman]
ip address 172.16.1.2 255.255.255.0[/font][/size]
[size=3][font=Times New Roman]
serial restart-delay 0[/font][/size]
[font=Times New Roman][size=3]router ospf 100[/size][/font]
[size=3][font=Times New Roman]
log-adjacency-changes[/font][/size]
[size=3][font=Times New Roman]
network 172.16.1.0 0.0.0.255 area 0[/font][/size]
[size=3][font=Times New Roman]
network 172.16.32.0 0.0.0.255 area 0
[/font][/size]
[font=Times New Roman][size=3]end[/size][/font]
[/td][/tr][/table][font=Times New Roman][size=3] [/size][/font]
[font=Times New Roman][size=3] [/size][/font]
[font=Times New Roman][size=3] [/size][/font]
[font=Times New Roman][size=3] [/size][/font]
[font=Times New Roman][size=3] [/size][/font]
[font=Times New Roman][size=3] [/size][/font]
[font=Times New Roman][size=3] [/size][/font]
[font=Times New Roman][size=3] [/size][/font]
[font=Times New Roman][size=3] [/size][/font]
[font=Times New Roman][size=3] [/size][/font]
[font=Times New Roman][size=3] [/size][/font]
[font=Times New Roman][size=3] [/size][/font]
[font=Times New Roman][size=3] [/size][/font]
[font=Times New Roman][size=3] [/size][/font]
[font=Times New Roman][size=3] [/size][/font]
[font=Times New Roman][size=3] [/size][/font]
[font=Times New Roman][size=3] [/size][/font]
[font=Times New Roman][size=3] [/size][/font]
[font=Times New Roman][size=3] [/size][/font]
[size=3][font=宋体]在[/font][font=Times New Roman]ISP[/font][font=宋体]和[/font][font=Times New Roman]ITAA[/font][font=宋体]之间起[/font][font=Times New Roman]BGP,[/font][font=宋体]在[/font][font=Times New Roman]ITAA[/font][font=宋体]和其子公司之间运行[/font][font=Times New Roman]OSPF:[/font][/size]
[font=Times New Roman][size=3] [/size][/font]
[table][tr][td][font=Times New Roman][size=3]ITAA(config)#router bgp 64512[/size][/font]
[font=Times New Roman][size=3]ITAA(config-router)#nei 192.168.1.5 remote[/size][/font]
[font=Times New Roman][size=3]ITAA(config-router)#nei 192.168.1.5 remote-as 200[/size][/font]
[font=Times New Roman][size=3]ITAA(config-router)#exi[/size][/font]
[font=Times New Roman][size=3]ITAA(config)#router ospf 100[/size][/font]
[font=Times New Roman][size=3]ITAA(config-router)#net 172.16.1.0 0.0.0.255 a 0[/size][/font]
[font=Times New Roman][size=3]ITAA(config-router)#net 172.16.64.0 0.0.0.255 a 0[/size][/font]
[font=Times New Roman][size=3]ITAA(config-router)#exi[/size][/font]
[/td][/tr][/table][font=Times New Roman][size=3] [/size][/font]
[table][tr][td][font=Times New Roman][size=3]ISP(config)#router bgp 200[/size][/font]
[font=Times New Roman][size=3]ISP(config-router)#nei 192.168.1.6 remot[/size][/font]
[font=Times New Roman][size=3]ISP(config-router)#nei 192.168.1.6 remote-as 64512[/size][/font]
[font=Times New Roman][size=3]ISP(config-router)#net 210.210.210.0[/size][/font]
[font=Times New Roman][size=3]ISP(config-router)#exi[/size][/font]
[/td][/tr][/table][font=Times New Roman][size=3] [/size][/font]
[table][tr][td][font=Times New Roman][size=3]ITAA_SUB(config)#router ospf 100[/size][/font]
[font=Times New Roman][size=3]ITAA_SUB(config-router)#net 172.16.1.0 0.0.0.255 a 0[/size][/font]
[font=Times New Roman][size=3]ITAA_SUB(config-router)#net 172.16.32.0 0.0.0.255 a 0[/size][/font]
[font=Times New Roman][size=3]ITAA_SUB(config-router)#exi[/size][/font]
[/td][/tr][/table][font=Times New Roman][size=3] [/size][/font]
[size=3][font=宋体]在[/font][font=Times New Roman]ITAA[/font][font=宋体]上配置[/font][font=Times New Roman]NAT[/font][font=宋体]地址池，并在接口中正确配置进出参数[/font][font=Times New Roman]:[/font][/size]
[font=Times New Roman][size=3] [/size][/font]
[table][tr][td=1,1,568][size=3][font=Times New Roman]ITAA(config)#$ ITAANAT 66.122.33.98 66.122.33.126 netmask 255.255.255.224
[/font][/size]
[font=Times New Roman][size=3]ITAA(config)#int s 1/1[/size][/font]
[font=Times New Roman][size=3]ITAA(config-if)#ip nat outside[/size][/font]
[font=Times New Roman][size=3]ITAA(config-if)#int lo0[/size][/font]
[font=Times New Roman][size=3]ITAA(config-if)#ip nat inside[/size][/font]
[font=Times New Roman][size=3]ITAA(config-if)#int s 1/0[/size][/font]
[font=Times New Roman][size=3]ITAA(config-if)#ip nat inside[/size][/font]
[font=Times New Roman][size=3]ITAA(config-if)#exi[/size][/font]
[font=Times New Roman][size=3]ITAA(config)#access-list 10 per 172.168.0.0 0.0.255.255 [/size][/font]
[font=Times New Roman][size=3]ITAA(config)#ip nat inside source list 10 pool ITAANAT overload[/size][/font]
[/td][/tr][/table][font=Times New Roman][size=3] [/size][/font]
[size=3][color=red][font=宋体]到此为止，我们已经配置好了[/font][/color][color=red][font=Times New Roman]NAT[/font][/color][color=red][font=宋体]地址池，但是我们可以发现一个很重要的问题，地址池中的公网[/font][/color][color=red][font=Times New Roman]IP[/font][/color][color=red][font=宋体]我们还没有通告出去，这也就是说，我们现在仅仅能完成内网通过[/font][/color][color=red][font=Times New Roman]ITAA[/font][/color][color=red][font=宋体]路由器的时候转化为公网[/font][/color][color=red][font=Times New Roman]IP[/font][/color][color=red][font=宋体]，但带有公网源地址的包依然无法路由出去！我们看：[/font][/color][color=red][/color][/size]
[table][tr][td=1,1,568][font=Times New Roman][size=3]ITAA#sh ip rou[/size][/font]
[font=Times New Roman][size=3]Gateway of last resort is not set.[/size][/font]
[font=Times New Roman][size=3] [/size][/font]
[font=Times New Roman][size=3]B
210.210.210.0/24 [20/0] via 192.168.1.5, 01:00:29[/size][/font]
[size=3][font=Times New Roman]
172.16.0.0/16 is variably subnetted, 3 subnets, 2 masks[/font][/size]
[font=Times New Roman][size=3]O
172.16.32.1/32 [110/65] via 172.16.1.2, 00:38:03, Serial1/0[/size][/font]
[font=Times New Roman][size=3]C
172.16.1.0/24 is directly connected, Serial1/0[/size][/font]
[font=Times New Roman][size=3]C
172.16.64.0/24 is directly connected, Loopback0[/size][/font]
[size=3][font=Times New Roman]
192.168.1.0/30 is subnetted, 1 subnets[/font][/size]
[size=3][font=Times New Roman]C
192.168.1.4 is directly connected, Serial1/1[color=red][/color][/font][/size]
[/td][/tr][/table][color=red][font=Times New Roman][size=3] [/size][/font][/color]
[color=red][font=宋体][size=3]路由表中[/size][/font][/color][font=宋体][size=14pt]没有公网路由信息[/size][/font][size=3][color=red][font=宋体]！[/font][/color][color=red][/color][/size]
[size=3][color=red][font=宋体]怎么办？？？？？？？？？？？？？？？？？？？？？很简单，做静态路由！（其实还有问题，请慢慢跟着步骤走下去）[/font][/color][color=red][/color][/size]
[table][tr][td=1,1,568][size=3][font=Times New Roman]ITAA(config)#ip route 66.122.33.96 255.255.255.224 210.210.210.0 230[color=red][/color][/font][/size]
[/td][/tr][/table][size=3][color=red][font=宋体]一条命令之后，路由表中便有了我们想看到的路由信息：[/font][/color][color=red][/color][/size]
[table][tr][td=1,1,568][font=Times New Roman][size=3]ITAA#sh ip rou[/size][/font]
[font=Times New Roman][size=3]Gateway of last resort is not set.[/size][/font]
[font=Times New Roman][size=3] [/size][/font]
[font=Times New Roman][size=3]B
210.210.210.0/24 [20/0] via 192.168.1.5, 01:00:29[/size][/font]
[size=3][font=Times New Roman]
66.0.0.0/27 is subnetted, 1 subnets[/font][/size]
[font=Times New Roman][size=3]S
66.122.33.96 [230/0] via 192.168.1.5[/size][/font]
[size=3][font=Times New Roman]
172.16.0.0/16 is variably subnetted, 3 subnets, 2 masks[/font][/size]
[font=Times New Roman][size=3]O
172.16.32.1/32 [110/65] via 172.16.1.2, 00:38:03, Serial1/0[/size][/font]
[font=Times New Roman][size=3]C
172.16.1.0/24 is directly connected, Serial1/0[/size][/font]
[font=Times New Roman][size=3]C
172.16.64.0/24 is directly connected, Loopback0[/size][/font]
[size=3][font=Times New Roman]
192.168.1.0/30 is subnetted, 1 subnets[/font][/size]
[size=3][font=Times New Roman]C
192.168.1.4 is directly connected, Serial1/1[color=red][/color][/font][/size]
[/td][/tr][/table][color=red][font=Times New Roman][size=3] [/size][/font][/color]
[size=3][color=red][font=宋体]但问题还是有，什么问题？[/font][/color][color=red][font=Times New Roman]ISP[/font][/color][color=red][font=宋体]里面没有我们路由的信息，数据包出去回不来！在我们冥思苦想之后恍然大悟，[/font][/color][color=red][font=Times New Roman]BGP[/font][/color][color=red][font=宋体]不是没用的，我们自然要将静态路由发布到[/font][/color][color=red][font=Times New Roman]BGP[/font][/color][color=red][font=宋体]中，这样[/font][/color][color=red][font=Times New Roman]ISP[/font][/color][color=red][font=宋体]不就知道了。[/font][/color][color=red][/color][/size]
[size=3][font=宋体]在[/font][font=Times New Roman]ITAA[/font][font=宋体]上将公网地址发布到[/font][font=Times New Roman]BGP[/font][font=宋体]，使其能和[/font][font=Times New Roman]ISP[/font][font=宋体]互通，接入[/font][font=Times New Roman]Internet[/font][font=宋体]：[/font][/size]
[font=宋体][size=3]一条命令：[/size][/font]
[table][tr][td=1,1,568][font=Times New Roman][size=3]ITAA(config)#router bgp 64512[/size][/font]
[font=Times New Roman][size=3]ITAA(config-router)#network 66.122.33.96 mask 255.255.255.254[/size][/font]
[/td][/tr][/table][size=3][color=red][font=Times New Roman]OK[/font][/color][color=red][font=宋体]，到此我们[/font][/color][color=red][font=Times New Roman]ITAA[/font][/color][color=red][font=宋体]总部的部门可以正常接入[/font][/color][color=red][font=Times New Roman]Internet[/font][/color][color=red][font=宋体]了，下面我们来照顾子公司。[/font][/color][color=red][/color][/size]
[size=3][font=宋体]在[/font][font=Times New Roman]ITAA[/font][font=宋体]上配置默认路由，保证下属公司可以成功接入网络：[/font][/size]
[table][tr][td=1,1,568][font=Times New Roman][size=3]ITAA(config)#router ospf 100[/size][/font]
[font=Times New Roman][size=3]ITAA(config-router)#default-information originate always metric 2500 metric-type 1[/size][/font]
[size=3][font=Times New Roman]ITAA(config)#ip default-network 210.210.210.0[color=red][/color][/font][/size]
[/td][/tr][/table][size=3][color=red][font=宋体]我们在子公司查看路由表：[/font][/color][color=red][/color][/size]
[table][tr][td=1,1,568][font=Times New Roman][size=3]ITAA_SUB#sh ip rou[/size][/font]
[font=Times New Roman][size=3]Gateway of last resort is 172.16.1.1 to network 0.0.0.0[/size][/font]
[font=Times New Roman][size=3] [/size][/font]
[size=3][font=Times New Roman]
172.16.0.0/16 is variably subnetted, 3 subnets, 2 masks[/font][/size]
[font=Times New Roman][size=3]C
172.16.32.0/24 is directly connected, Loopback0[/size][/font]
[font=Times New Roman][size=3]C
172.16.1.0/24 is directly connected, Serial1/1[/size][/font]
[font=Times New Roman][size=3]O
172.16.64.1/32 [110/65] via 172.16.1.1, 00:53:14, Serial1/1[/size][/font]
[size=3][font=Times New Roman]O*E1 0.0.0.0/0 [110/2564] via 172.16.1.1, 00:53:14, Serial1/1[/font][/size]
[/td][/tr][/table][color=red][font=Times New Roman][size=3] [/size][/font][/color]
[color=red][font=Times New Roman][size=3] [/size][/font][/color]
[font=宋体][size=3]整体测试：[/size][/font]
[font=Times New Roman][size=3] [/size][/font]
[font=宋体][size=3]连通性测试：[/size][/font]
[size=3][font=Times New Roman]
ITAA-SUB[/font][font=宋体]上的连通性：[/font][/size]
[table][tr][td=1,1,568][font=Times New Roman][size=3]ITAA_SUB#ping 210.210.210.1[/size][/font]
[font=Times New Roman][size=3]Type escape sequence to abort.[/size][/font]
[font=Times New Roman][size=3]Sending 5, 100-byte ICMP Echos to 210.210.210.1, timeout is 2 seconds:[/size][/font]
[font=Times New Roman][size=3]!!!!![/size][/font]
[font=Times New Roman][size=3]Success rate is 100 percent (5/5), round-trip min/avg/max = 96/257/420 ms[/size][/font]
[/td][/tr][/table][size=3][font=Times New Roman] [/font][font=宋体]扩展[/font][font=Times New Roman]Ping[/font][font=宋体]（更换源地址）[/font][/size]
[table][tr][td=1,1,568][font=Times New Roman][size=3]ITAA_SUB#p[/size][/font]
[font=Times New Roman][size=3]Protocol [ip]: [/size][/font]
[font=Times New Roman][size=3]Target IP address: 210.210.210.1[/size][/font]
[font=Times New Roman][size=3]Repeat count [5]: [/size][/font]
[font=Times New Roman][size=3]Datagram size [100]: [/size][/font]
[font=Times New Roman][size=3]Timeout in seconds [2]: [/size][/font]
[font=Times New Roman][size=3]Extended commands [n]: y[/size][/font]
[font=Times New Roman][size=3]Source address or interface: 172.16.32.1[/size][/font]
[font=Times New Roman][size=3]Type of service [0]: [/size][/font]
[font=Times New Roman][size=3]Set DF bit in IP header? [no]: [/size][/font]
[font=Times New Roman][size=3]Validate reply data? [no]: [/size][/font]
[font=Times New Roman][size=3]Data pattern [0xABCD]: [/size][/font]
[font=Times New Roman][size=3]Loose, Strict, Record, Timestamp, Verbose[none]: [/size][/font]
[font=Times New Roman][size=3]Sweep range of sizes [n]: [/size][/font]
[font=Times New Roman][size=3]Type escape sequence to abort.[/size][/font]
[font=Times New Roman][size=3]Sending 5, 100-byte ICMP Echos to 210.210.210.1, timeout is 2 seconds:[/size][/font]
[font=Times New Roman][size=3]Packet sent with a source address of 172.16.32.1 [/size][/font]
[font=Times New Roman][size=3]!!!!![/size][/font]
[font=Times New Roman][size=3]Success rate is 100 percent (5/5), round-trip min/avg/max = 64/270/400 ms[/size][/font]
[/td][/tr][/table][size=3][font=Times New Roman] [/font][color=red][font=宋体]子公司可以正常接入[/font][/color][color=red][font=Times New Roman]Internet.[/font][/color][/size]
[size=3][color=black][font=Times New Roman]NAT[/font][/color][color=black][font=宋体]测试：[/font][/color][color=black][/color][/size]
[size=3][color=black][font=Times New Roman] [/font][/color][color=black][font=宋体]利用上面的测试，在[/font][/color][color=black][font=Times New Roman]ITAA[/font][/color][color=black][font=宋体]上打开[/font][/color][color=black][font=Times New Roman]debug ip nat[/font][/color][/size]
[table][tr][td=1,1,568][color=black][size=3][font=Times New Roman]ITAA(config)#[/font][/size][/color]
[color=black][size=3][font=Times New Roman]*Apr
5 14:55:02.003: NAT: s=172.16.1.2->66.122.33.99, d=210.210.210.1 [22][/font][/size][/color]
[color=black][size=3][font=Times New Roman]*Apr
5 14:55:02.263: NAT*: s=210.210.210.1, d=66.122.33.99->172.16.1.2 [22][/font][/size][/color]
[color=black][size=3][font=Times New Roman]*Apr
5 14:55:02.431: NAT*: s=172.16.1.2->66.122.33.99, d=210.210.210.1 [23][/font][/size][/color]
[color=black][size=3][font=Times New Roman]*Apr
5 14:55:02.527: NAT*: s=210.210.210.1, d=66.122.33.99->172.16.1.2 [23][/font][/size][/color]
[color=black][size=3][font=Times New Roman]*Apr
5 14:55:02.671: NAT*: s=172.16.1.2->66.122.33.99, d=210.210.210.1 [24][/font][/size][/color]
[color=black][size=3][font=Times New Roman]*Apr
5 14:55:02.799: NAT*: s=210.210.210.1, d=66.122.33.99->172.16.1.2 [24][/font][/size][/color]
[color=black][size=3][font=Times New Roman]*Apr
5 14:55:03.015: NAT*: s=172.16.1.2->66.122.33.99, d=210.210.210.1 [25][/font][/size][/color]
[color=black][size=3][font=Times New Roman]*Apr
5 14:55:03.087: NAT*: s=210.210.210.1, d=66.122.33.99->172.16.1.2 [25][/font][/size][/color]
[color=black][size=3][font=Times New Roman]*Apr
5 14:55:03.231: NAT*: s=172.16.1.2->66.122.33.99, d=210.210.210.1 [26][/font][/size][/color]
[color=black][size=3][font=Times New Roman]*Apr
5 14:55:03.443: NAT*: s=210.210.210.1, d=66.122.33.99->172.16.1.2 [26][/font][/size][/color]
[/td][/tr][/table][size=3][color=black][font=Times New Roman] [/font][/color][color=red][font=宋体]已经成功转换地址！[/font][/color][color=red][/color][/size]
