Difference between revisions of "Cisco: Static Routing Sedehana"

From OnnoWiki
Jump to navigation Jump to search
Line 75: Line 75:
 
Router1:
 
Router1:
  
/ip firewall nat add chain=srcnat out-interface=ether1 action=masquareade
 
/ip firewall nat print
 
  
 +
Using NAT to Allow Internal Users Access to the Internet
  
 +
Perform this task to allow your internal users access to the Internet and conserve addresses in the inside global address pool using overloading of global addresses.
 +
 +
SUMMARY STEPS
 +
 +
enable
 +
configure terminal
 +
ip nat pool name start-ip end-ip {netmask netmask | prefix-length prefix-length }
 +
access-list access-list-number permit source [source-wildcard ]
 +
ip nat inside source list access-list-number pool name overload
 +
interface type number
 +
ip address ip-address mask
 +
ip nat inside
 +
exit
 +
interface type number
 +
ip address ip-address mask
 +
ip nat outside
 +
end
 +
 +
 +
 +
===Referensi===
 +
 +
* https://www.cisco.com/c/en/us/td/docs/ios-xml/ios/ipaddr_nat/configuration/15-mt/nat-15-mt-book/iadnat-addr-consv.html
  
 
==Setting Client==
 
==Setting Client==

Revision as of 05:51, 22 December 2018

SR1.png


R1:

Ethernet1/1 - ke Internet
Ethernet1/2 - R2: Ethernet 1/1
Ethernet1/3 - LAN

R2:

Ethernet1/1 - R1: Ethernet1/2
Ethernet1/2 - LAN


R1:

enable
configure terminal
  interface ethernet1/1
    ip address 10.1.1.2 255.255.255.0   # static ke internet
    ip address dhcp                     # dhcp ke internet
    no shutdown
    exit
  interface ethernet1/2
    ip address 172.16.1.1 255.255.255.252
    no shutdown
    exit
  interface ethernet1/3
    ip address 192.168.1.1 255.255.255.0
    no shutdown 
    exit
  ip route 192.168.2.0 255.255.255.0 172.16.1.2
  exit
copy running-config startup-config

R2:

enable
config terminal
   interface ethernet1/1
    ip address 172.16.1.2 255.255.255.252
    no shutdown
    exit
  interface ethernet1/2
    ip address 192.168.2.1 255.255.255.0
    no shutdown 
    exit
  ip route 192.168.1.0 255.255.255.0 172.16.1.1
  ip route 0.0.0.0 0.0.0.0 172.16.1.1
  exit
copy running-config startup-config

Request DHCP

enable
config terminal
  interface ethernet1/1
    ip dhcp client request
    exit
  exit


Test

R1:

ping 192.168.2.1

R2:

ping 192.168.1.1


Tambahan Kalau Membutuhkan NAT

Router1:


Using NAT to Allow Internal Users Access to the Internet

Perform this task to allow your internal users access to the Internet and conserve addresses in the inside global address pool using overloading of global addresses.

SUMMARY STEPS

enable
configure terminal
ip nat pool name start-ip end-ip {netmask netmask | prefix-length prefix-length }
access-list access-list-number permit source [source-wildcard ]
ip nat inside source list access-list-number pool name overload
interface type number
ip address ip-address mask
ip nat inside
exit
interface type number
ip address ip-address mask
ip nat outside
end


Referensi

Setting Client

LAN 1 Client:

ip 192.168.1.2
gw 192.168.1.1


LAN 2 Client:

ip 192.168.2.2
gw 192.168.2.1


Pranala Menarik