Tarmoq xavfsizligi

NAPT, NAT Overload, PAT



PAT- dinamik NATning bir shakli bo'lib, bir nechta ro'yxatdan o'tmagan manzillarni turli xil portlardan foydalangan holda bitta ro'yxatdan o'tgan IP manzilga translatsiya qilishdan iborat.
PAT bo`yicha ishni bajarish tartibi

10.8 – rasm. PAT tamoyili asosida qurilgan tarmoq tuzilishi
Router1(config)#ip route 0.0.0.0 0.0.0.0 12.12.12.2
Router1(config)#ip nat pool nad_pat 195.158.1.1 195.158.1.4 netmask 255.255.255.240
Router1(config)#access-list 10 permit 192.168.1.0 0.0.0.255
Router1(config)#ip nat inside source list 10 pool nad_pat overload
Router1(config)#interface fastEthernet 0/0
Router1(config-if)#ip nat inside
Router1(config-if)#exit
Router1(config)#interface fastEthernet 0/1
Router(config-if)#ip nat outside
Router(config-if)#exit
Router(config)#end
Router#copy run startup-config
Router 2 konfiguratsiyasi
Router(config)#ip route 0.0.0.0 0.0.0.0 12.12.12.1





10.9 Rasm

LAN tarmog`idagi barcha Private adreslar bitta 195.158.1.1 Public adres orqali translatsiya bo`ladi faqat port har xil.

Topshiriq

• 
  Cisco packet tracer muhiti asosida tarmoqni tuzilishini yarating
  
• 
  Tamoqdag har bir R1, R2 marshrutizatorlarining interfeyslarini sozlang va tekshiring
  
• 
  Statik NAT bo`yicha tarmoq konfiguratsiyalarini sozlang va tekshiring
  
• 
  Dinamik NAT bo`yicha tarmoq konfiguratsiyalarini sozlang va tekshiring
  
• 
  PAT bo`yicha tarmoq konfiguratsiyalarini sozlang va tekshiring