Option_W_3 - презентация

1 © 2003, Cisco Systems, Inc. All rights reserved. CSVPN Lesson 16 Configure the Cisco VPN 3000 Series Concentrator for LAN-to-LAN with NAT

2 © 2003, Cisco Systems, Inc. All rights reserved. CSVPN Objectives Upon the completion of this lesson, you will be able to perform the following tasks: Configure the static LAN-to-LAN NAT rule. Enable NAT rules. Monitor LAN-to-LAN NAT statistics.

3 © 2003, Cisco Systems, Inc. All rights reserved. CSVPN LAN-to-LAN NAT Overview

4 © 2003, Cisco Systems, Inc. All rights reserved. CSVPN Addressing Issue Internet Site A Site B Return to X Send to Server B1 Server B2

5 © 2003, Cisco Systems, Inc. All rights reserved. CSVPN NAT Internet Site A Site B Return to D: S: Send to D: S: D: S: D: S: D: S: D: S: NAT Server B1 Server B2

6 © 2003, Cisco Systems, Inc. All rights reserved. CSVPN Overlapping Address Space Internet Site A Site B Server B1 Server B2

7 © 2003, Cisco Systems, Inc. All rights reserved. CSVPN The Issue Internet Site A Site B Send to Send to X X

8 © 2003, Cisco Systems, Inc. All rights reserved. CSVPN Site A NAT Internet Site A Site B S: NAT D: S: S: D:

9 © 2003, Cisco Systems, Inc. All rights reserved. CSVPN S: Site B NAT D: NAT S: S: D: D: Internet Site A Site B

10 © 2003, Cisco Systems, Inc. All rights reserved. CSVPN LAN-to-LAN NAT Summary Internet PC A S: D: Server B S: D: S: S: Concentrator AConcentrator B Concentrator Interface Outbound Translation Inbound Translation Concentrator Interface S: > D: S: D: NAT Rule A S: D: > NAT Rule B D: S: D: Inbound Translation Outbound Translation S: D: S:

11 © 2003, Cisco Systems, Inc. All rights reserved. CSVPN Configuring the Concentrator LAN-to-LAN NAT Feature

12 © 2003, Cisco Systems, Inc. All rights reserved. CSVPN LAN-to-LAN NAT Rule Types Internet X Static NAT X NAT Rule Types Source and Translated Addresses Site A Site B

13 © 2003, Cisco Systems, Inc. All rights reserved. CSVPN Site A LAN-to-LAN NAT Configuration Internet Site A S: D: S: D: Site B S: D:

14 © 2003, Cisco Systems, Inc. All rights reserved. CSVPN Site B LAN-to-LAN NAT Configuration Internet Site A Site B D: S: D: S: D: S:

15 © 2003, Cisco Systems, Inc. All rights reserved. CSVPN Enable NAT

16 © 2003, Cisco Systems, Inc. All rights reserved. CSVPN Concentrator Network ListsSite A Internet Site B /24 Site A ( ) ( )

17 © 2003, Cisco Systems, Inc. All rights reserved. CSVPN Concentrator Network ListsSite B Internet Site B /24 Site A ( ) ( )

18 © 2003, Cisco Systems, Inc. All rights reserved. CSVPN LAN-to-LAN NAT Statistics Internet Site A Ping Reply from Site B S: D: S: D:

19 © 2003, Cisco Systems, Inc. All rights reserved. CSVPN Summary

20 © 2003, Cisco Systems, Inc. All rights reserved. CSVPN Summary LAN-to-LAN NAT translates overlapping private network address spaces. There are two translation rule types: static and dynamic. LAN-to-LAN rules should be configured first. LAN-to-LAN rules should be enabled next. Tie a translated address to a Concentrator.

21 © 2003, Cisco Systems, Inc. All rights reserved. CSVPN Lab Exercise

22 © 2003, Cisco Systems, Inc. All rights reserved. CSVPN Lab Visual Objective Q P.0 Student PC.5 Student PC P Q P Q.0 RTS.100 RTS.100 Pods 1–5 Pods 6–10.10 Web FTP.10 RBB Concentrator Translation IP address: /24 Translation IP address: /24