需求:监控服务器的IP是10.31.32.177,我需要去监控N3K交换机上的专线可用性,需要配置源地址转换,将监控服务器的地址转换为专线接口的出接口IP地址。
实现方式:
1、一端是VLAN,一端是物理接口的配置
interface Vlan100 # inside接口,监控流量的入接口no shutdownip address 10.13.254.53/28 ip nat inside interface Ethernet1/44 # outside接口,接的是专线no switchportip address 10.226.96.6/30 # 专线对端地址是10.226.96.5no shutdownip nat outside ip access-list JK_L2_ACL # 使用ACL匹配流量permit ip 10.31.32.177/32 10.226.96.5/32 # 10.31.32.177/32是我们监控服务器的地址ip nat inside source list JK_L2_ACL interface Ethernet 1/44 overload
2、两端都是VLAN接口的配置
interface Vlan100 # 监控流量的入接口no shutdownip address 10.13.254.53/28ip nat inside hsrp 10 preempt priority 105ip 10.13.254.55interface Ethernet1/45 # 专线物理接口description jiaoyi-Aswitchport access vlan 2211speed 1000interface Vlan2211 # 专线VLAN接口description name jiaoyi-Ano shutdownip address 221.112.151.241/24 # 专线对端地址是221.112.150.254ip nat outside ip access-list JK_L1BP_ACL # 匹配监控流量30 permit ip 10.31.32.177/32 221.112.151.254/32 # 10.31.32.177/32是监控服务器的地址ip nat inside source list JK_L1BP_ACL interface vlan 2211 overload