Доброго времени суток! Имеем Cisco 837 со следующей конфой... Using 2073 out of 131072 bytes ! version 12.4 no service pad service timestamps debug datetime msec service timestamps log datetime msec no service password-encryption ! hostname internet ! boot-start-marker boot-end-marker ! enable secret 5 $1$cJJ/$BfrmLd.YGnvJ9jIlZ6iot0 enable password gjytltkmybr ! aaa new-model ! ! aaa authentication login userauthen local aaa authorization network groupauthor local ! aaa session-id common resource policy ! ip subnet-zero no ip dhcp use vrf connected ! ! ip cef no ip ips deny-action ips-interface ! ! ! username pyrikov password 0 gjytltkmybr username CRWS_Ulags privilege 15 password 0 $1$W1fA$o1oSEpa1141695976 username CRWS_Srini privilege 15 password 0 $1$W1fA$o1oSEpa940032489 username cisco password 0 cisco ! ! ! crypto isakmp policy 3 encr 3des authentication pre-share group 2 ! crypto isakmp client configuration group 3000client key cisco123 pool ippool acl 108 ! ! crypto ipsec transform-set myset esp-3des esp-sha-hmac ! crypto dynamic-map dynmap 10 set transform-set myset ! ! crypto map clientmap client authentication list userauthen crypto map clientmap isakmp authorization list groupauthor crypto map clientmap client configuration address respond crypto map clientmap 10 ipsec-isakmp dynamic dynmap ! ! ! interface Ethernet0 ip address 192.168.80.30 255.255.255.0 secondary ip address 192.168.2.30 255.255.255.0 crypto map clientmap hold-queue 100 out ! interface Ethernet2 description --LAN-NETWORK--- no ip address hold-queue 100 out ! interface ATM0 no ip address shutdown no atm ilmi-keepalive dsl operating-mode auto ! interface FastEthernet1 speed 100 full-duplex ! interface FastEthernet2 speed 100 full-duplex ! interface FastEthernet3 shutdown duplex auto speed auto ! interface FastEthernet4 duplex auto speed auto ! ip local pool ippool 192.168.1.1 192.168.1.200 ip classless ip route 192.168.80.0 255.255.255.0 192.168.80.31 ip http server no ip http secure-server ! ! ! control-plane ! ! line con 0 no modem enable line aux 0 line vty 0 4 password lipetsk ! scheduler max-task-time 5000 end Скажите каким образом прописать нат, чтобы всё что уходит с interface Ethernet0 транслировалось в один внешний адрес?
|