| 场景 | 多用户共享少量公网地址 |
|---|---|
| 适用 | Cisco IOS/IOS-XE |
| 关键 | overload 缺省端口复用；不写则是一对一地址分配 |
思科 IOS
思科 IOS
access-list 1 permit 192.168.1.0 0.0.0.255
ip nat inside source list 1 interface GigabitEthernet0/0 overload
interface GigabitEthernet0/1
ip nat inside
interface GigabitEthernet0/0
ip nat outside
show ip nat translations
show ip nat statistics华为 VRP
华为 VRP
acl number 2000
rule 5 permit source 192.168.1.0 0.0.0.255
interface GigabitEthernet0/0/1
nat outbound 2000
display nat session allH3C Comware
H3C Comware
acl basic 2000
rule 0 permit source 192.168.1.0 0.0.0.255
interface GigabitEthernet1/0/1
nat outbound 2000
display nat session all差异：思科用 show ip nat statistics 看 total translations / hits / misses，是判断 NAT 是否在工作的第一手依据；华为/H3C 对应 display nat session 与 display nat outbound。