Hirdetés

  2. Fórumok
  3. Hálózat, szolgáltatók
  4. Cisco vizsgák (CCNA, CCNP, CCIE)
Keresés
  • Téma összefoglaló
    Utoljára frissítve: 2020-02-27 09:43

    LOGOUT

    --- Még az új vizsgarendszer előtti információk, majd frissítjük! ---


    Gyakran ismételt kérdések
    Olvasd el a cikkeket itt.

Új hozzászólás Aktív témák

  • #5057 jerry311 nagyúr jerry311 #5055
    Új Válasz #5057
    Új hozzászólás
    Összes hozzászólása itt Válaszok az összes hozzászólására itt Válaszok erre a hozzászólásra
    Privát üzenet küldése

    jerry311

    nagyúr

    válasz jerry311 #5055 üzenetére

    Most ez mi? :W
    ping 20.20.20.230 --> 10.10.20.2 --- nincs NAT
    ping 20.20.20.230 --> 10.10.10.3 --- van NAT
    ping 20.20.20.230 --> 10.10.20.2 --- van NAT

    Hogyan születik a 3. pingnél a NAT? Hogyan illeszkedik ez akármilyen meglévő translation-re, ami alapján még jogos is lehetne?

    R1#clear ip nat trans *
    R1#show ip nat trans

    R2#ping 10.10.20.2 repeat 1

    Type escape sequence to abort.
    Sending 1, 100-byte ICMP Echos to 10.10.20.2, timeout is 2 seconds:
    .
    Success rate is 0 percent (0/1)

    R1#show ip nat trans

    R2#ping 10.10.10.3 repeat 1

    Type escape sequence to abort.
    Sending 1, 100-byte ICMP Echos to 10.10.10.3, timeout is 2 seconds:
    !
    Success rate is 100 percent (1/1), round-trip min/avg/max = 164/164/164 ms

    R1#
    *Nov 16 18:14:10.134: IP: s=20.20.20.230 (FastEthernet0/0), d=10.10.10.3, len 100, input feature
    *Nov 16 18:14:10.138: ICMP type=8, code=0, Stateful Inspection(5), rtype 0, forus FALSE, sendself FALSE, mtu 0, fwdchk FALSE
    *Nov 16 18:14:10.142: IP: s=20.20.20.230 (FastEthernet0/0), d=10.10.10.3, len 100, input feature
    *Nov 16 18:14:10.142: ICMP type=8, code=0, Virtual Fragment Reassembly(25), rtype 0, forus FALSE, sendself FALSE, mtu 0, fwdchk FALSE
    *Nov 16 18:14:10.146: IP: s=20.20.20.230 (FastEthernet0/0), d=10.10.10.3, len 100, input feature
    *Nov 16 18:14:10.146: ICMP type=8, code=0, Virtual Fragment Reassembly After IPSec Decryption(39), rtype 0, forus FALSE, sendself FALSE, mtu 0, fwdchk FALSE
    *Nov 16 18:14:10.150: IP: s=20.20.20.230 (FastEthernet0/0), d=10.10.10.3, len 100, input feature
    *Nov 16 18:14:10.154: ICMP type=8, code=0, NAT Outside(66), rtype 0, forus FALSE, sendself FALSE, mtu 0, fwdchk FALSE
    *Nov 16 18:14:10.158: IP: s=20.20.20.230 (FastEther
    R1#net0/0), d=10.10.10.3, len 100, input feature
    *Nov 16 18:14:10.158: ICMP type=8, code=0, MCI Check(80), rtype 0, forus FALSE, sendself FALSE, mtu 0, fwdchk FALSE
    *Nov 16 18:14:10.162: FIBipv4-packet-proc: route packet from FastEthernet0/0 src 20.20.20.230 dst 10.10.10.3
    *Nov 16 18:14:10.162: FIBfwd-proc: packet routed by adj to FastEthernet0/1 192.168.1.1
    *Nov 16 18:14:10.166: FIBipv4-packet-proc: packet routing succeeded
    *Nov 16 18:14:10.166: IP: s=192.168.1.72 (FastEthernet0/0), d=10.10.10.3 (FastEthernet0/1), len 100, output feature
    *Nov 16 18:14:10.170: ICMP type=8, code=0, NAT Inside(8), rtype 1, forus FALSE, sendself FALSE, mtu 0, fwdchk FALSE
    *Nov 16 18:14:10.174: IP: s=192.168.1.72 (FastEthernet0/0), d=10.10.10.3 (FastEthernet0/1), len 100, output feature
    *Nov 16 18:14:10.178: ICMP type=8, code=0, Stateful Inspection(27), rtype 1, forus FALSE, sendself FALSE, mtu 0, fwdchk FALSE
    *Nov 16 18:14:10.178: IP: s=192.168.1.72 (FastEthernet0/0), d=10.10.10.3 (Fast
    R1#Ethernet0/1), len 100, output feature
    *Nov 16 18:14:10.182: ICMP type=8, code=0, NAT ALG proxy(55), rtype 1, forus FALSE, sendself FALSE, mtu 0, fwdchk FALSE
    *Nov 16 18:14:10.186: IP: s=192.168.1.72 (FastEthernet0/0), d=10.10.10.3 (FastEthernet0/1), g=192.168.1.1, len 100, forward
    *Nov 16 18:14:10.190: ICMP type=8, code=0
    *Nov 16 18:14:10.194: IP: s=192.168.1.72 (FastEthernet0/0), d=10.10.10.3 (FastEthernet0/1), len 100, sending full packet
    *Nov 16 18:14:10.194: ICMP type=8, code=0
    *Nov 16 18:14:10.246: IP: s=10.10.10.3 (FastEthernet0/1), d=192.168.1.72, len 100, input feature
    *Nov 16 18:14:10.250: ICMP type=0, code=0, Stateful Inspection(5), rtype 0, forus FALSE, sendself FALSE, mtu 0, fwdchk FALSE
    *Nov 16 18:14:10.254: IP: s=10.10.10.3 (FastEthernet0/1), d=192.168.1.72, len 100, input feature
    *Nov 16 18:14:10.254: ICMP type=0, code=0, Virtual Fragment Reassembly(25), rtype 0, forus FALSE, sendself FALSE, mtu 0, fwdchk FALSE
    *Nov 16 18:14:10.258: IP: s=1
    R1#0.10.10.3 (FastEthernet0/1), d=192.168.1.72, len 100, input feature
    *Nov 16 18:14:10.258: ICMP type=0, code=0, Virtual Fragment Reassembly After IPSec Decryption(39), rtype 0, forus FALSE, sendself FALSE, mtu 0, fwdchk FALSE
    *Nov 16 18:14:10.258: IP: s=10.10.10.3 (FastEthernet0/1), d=192.168.1.72, len 100, input feature
    *Nov 16 18:14:10.258: ICMP type=0, code=0, MCI Check(80), rtype 0, forus FALSE, sendself FALSE, mtu 0, fwdchk FALSE
    *Nov 16 18:14:10.258: FIBipv4-packet-proc: route packet from FastEthernet0/1 src 10.10.10.3 dst 192.168.1.72
    *Nov 16 18:14:10.258: FIBfwd-proc: Default:192.168.1.72/32 receive entry
    *Nov 16 18:14:10.258: FIBipv4-packet-proc: packet routing failed
    *Nov 16 18:14:10.258: IP: tableid=0, s=10.10.10.3 (FastEthernet0/1), d=192.168.1.72 (FastEthernet0/0), routed via RIB
    *Nov 16 18:14:10.258: IP: s=10.10.10.3 (FastEthernet0/1), d=20.20.20.230 (FastEthernet0/0), len 100, output feature
    *Nov 16 18:14:10.262: ICMP type=0, code=0, Post-routing NAT
    R1# Outside(24), rtype 1, forus FALSE, sendself FALSE, mtu 0, fwdchk FALSE
    *Nov 16 18:14:10.266: IP: s=10.10.10.3 (FastEthernet0/1), d=20.20.20.230 (FastEthernet0/0), len 100, output feature
    *Nov 16 18:14:10.270: ICMP type=0, code=0, Stateful Inspection(27), rtype 1, forus FALSE, sendself FALSE, mtu 0, fwdchk FALSE
    *Nov 16 18:14:10.270: IP: s=10.10.10.3 (FastEthernet0/1), d=20.20.20.230 (FastEthernet0/0), len 100, output feature
    *Nov 16 18:14:10.270: ICMP type=0, code=0, NAT ALG proxy(55), rtype 1, forus FALSE, sendself FALSE, mtu 0, fwdchk FALSE
    *Nov 16 18:14:10.270: IP: s=10.10.10.3 (FastEthernet0/1), d=20.20.20.230 (FastEthernet0/0), g=20.20.20.230, len 100, forward
    *Nov 16 18:14:10.270: ICMP type=0, code=0
    *Nov 16 18:14:10.270: IP: s=10.10.10.3 (FastEthernet0/1), d=20.20.20.230 (FastEthernet0/0), len 100, sending full packet
    *Nov 16 18:14:10.270: ICMP type=0, code=0
    R1#
    R1#show ip nat trans
    Pro Inside global Inside local Outside local Outside global
    icmp 10.10.10.3:87 10.10.10.3:87 192.168.1.72:87 20.20.20.230:87
    --- --- --- 192.168.1.72 20.20.20.230

    R2#ping 10.10.20.2 repeat 1

    Type escape sequence to abort.
    Sending 1, 100-byte ICMP Echos to 10.10.20.2, timeout is 2 seconds:
    !
    Success rate is 100 percent (1/1), round-trip min/avg/max = 112/112/112 ms

    R1#
    *Nov 16 18:14:20.870: IP: s=20.20.20.230 (FastEthernet0/0), d=10.10.20.2, len 100, input feature
    *Nov 16 18:14:20.874: ICMP type=8, code=0, Stateful Inspection(5), rtype 0, forus FALSE, sendself FALSE, mtu 0, fwdchk FALSE
    *Nov 16 18:14:20.878: IP: s=20.20.20.230 (FastEthernet0/0), d=10.10.20.2, len 100, input feature
    *Nov 16 18:14:20.878: ICMP type=8, code=0, Virtual Fragment Reassembly(25), rtype 0, forus FALSE, sendself FALSE, mtu 0, fwdchk FALSE
    *Nov 16 18:14:20.882: IP: s=20.20.20.230 (FastEthernet0/0), d=10.10.20.2, len 100, input feature
    *Nov 16 18:14:20.886: ICMP type=8, code=0, Virtual Fragment Reassembly After IPSec Decryption(39), rtype 0, forus FALSE, sendself FALSE, mtu 0, fwdchk FALSE
    *Nov 16 18:14:20.886: IP: s=20.20.20.230 (FastEthernet0/0), d=10.10.20.2, len 100, input feature
    *Nov 16 18:14:20.890: ICMP type=8, code=0, NAT Outside(66), rtype 0, forus FALSE, sendself FALSE, mtu 0, fwdchk FALSE
    *Nov 16 18:14:20.890: IP: s=20.20.20.230 (FastEther
    R1#net0/0), d=10.10.20.2, len 100, input feature
    *Nov 16 18:14:20.890: ICMP type=8, code=0, MCI Check(80), rtype 0, forus FALSE, sendself FALSE, mtu 0, fwdchk FALSE
    *Nov 16 18:14:20.890: FIBipv4-packet-proc: route packet from FastEthernet0/0 src 20.20.20.230 dst 10.10.20.2
    *Nov 16 18:14:20.890: FIBfwd-proc: packet routed by adj to FastEthernet0/1 192.168.1.1
    *Nov 16 18:14:20.890: FIBipv4-packet-proc: packet routing succeeded
    *Nov 16 18:14:20.894: IP: s=192.168.1.72 (FastEthernet0/0), d=10.10.20.2 (FastEthernet0/1), len 100, output feature
    *Nov 16 18:14:20.894: ICMP type=8, code=0, NAT Inside(8), rtype 1, forus FALSE, sendself FALSE, mtu 0, fwdchk FALSE
    *Nov 16 18:14:20.894: IP: s=192.168.1.72 (FastEthernet0/0), d=10.10.20.2 (FastEthernet0/1), len 100, output feature
    *Nov 16 18:14:20.894: ICMP type=8, code=0, Stateful Inspection(27), rtype 1, forus FALSE, sendself FALSE, mtu 0, fwdchk FALSE
    *Nov 16 18:14:20.894: IP: s=192.168.1.72 (FastEthernet0/0), d=10.10.20.2 (Fast
    R1#Ethernet0/1), len 100, output feature
    *Nov 16 18:14:20.898: ICMP type=8, code=0, NAT ALG proxy(55), rtype 1, forus FALSE, sendself FALSE, mtu 0, fwdchk FALSE
    *Nov 16 18:14:20.898: IP: s=192.168.1.72 (FastEthernet0/0), d=10.10.20.2 (FastEthernet0/1), g=192.168.1.1, len 100, forward
    *Nov 16 18:14:20.898: ICMP type=8, code=0
    *Nov 16 18:14:20.898: IP: s=192.168.1.72 (FastEthernet0/0), d=10.10.20.2 (FastEthernet0/1), len 100, sending full packet
    *Nov 16 18:14:20.898: ICMP type=8, code=0
    *Nov 16 18:14:20.914: IP: s=10.10.20.2 (FastEthernet0/1), d=192.168.1.72, len 100, input feature
    *Nov 16 18:14:20.918: ICMP type=0, code=0, Stateful Inspection(5), rtype 0, forus FALSE, sendself FALSE, mtu 0, fwdchk FALSE
    *Nov 16 18:14:20.918: IP: s=10.10.20.2 (FastEthernet0/1), d=192.168.1.72, len 100, input feature
    *Nov 16 18:14:20.922: ICMP type=0, code=0, Virtual Fragment Reassembly(25), rtype 0, forus FALSE, sendself FALSE, mtu 0, fwdchk FALSE
    *Nov 16 18:14:20.926: IP: s=1
    R1#0.10.20.2 (FastEthernet0/1), d=192.168.1.72, len 100, input feature
    *Nov 16 18:14:20.926: ICMP type=0, code=0, Virtual Fragment Reassembly After IPSec Decryption(39), rtype 0, forus FALSE, sendself FALSE, mtu 0, fwdchk FALSE
    *Nov 16 18:14:20.930: IP: s=10.10.20.2 (FastEthernet0/1), d=192.168.1.72, len 100, input feature
    *Nov 16 18:14:20.934: ICMP type=0, code=0, MCI Check(80), rtype 0, forus FALSE, sendself FALSE, mtu 0, fwdchk FALSE
    *Nov 16 18:14:20.934: FIBipv4-packet-proc: route packet from FastEthernet0/1 src 10.10.20.2 dst 192.168.1.72
    *Nov 16 18:14:20.938: FIBfwd-proc: Default:192.168.1.72/32 receive entry
    *Nov 16 18:14:20.938: FIBipv4-packet-proc: packet routing failed
    *Nov 16 18:14:20.942: IP: tableid=0, s=10.10.20.2 (FastEthernet0/1), d=192.168.1.72 (FastEthernet0/0), routed via RIB
    *Nov 16 18:14:20.942: IP: s=10.10.20.2 (FastEthernet0/1), d=20.20.20.230 (FastEthernet0/0), len 100, output feature
    *Nov 16 18:14:20.946: ICMP type=0, code=0, Post-routing NAT
    R1# Outside(24), rtype 1, forus FALSE, sendself FALSE, mtu 0, fwdchk FALSE
    *Nov 16 18:14:20.950: IP: s=10.10.20.2 (FastEthernet0/1), d=20.20.20.230 (FastEthernet0/0), len 100, output feature
    *Nov 16 18:14:20.954: ICMP type=0, code=0, Stateful Inspection(27), rtype 1, forus FALSE, sendself FALSE, mtu 0, fwdchk FALSE
    *Nov 16 18:14:20.954: IP: s=10.10.20.2 (FastEthernet0/1), d=20.20.20.230 (FastEthernet0/0), len 100, output feature
    *Nov 16 18:14:20.954: ICMP type=0, code=0, NAT ALG proxy(55), rtype 1, forus FALSE, sendself FALSE, mtu 0, fwdchk FALSE
    *Nov 16 18:14:20.954: IP: s=10.10.20.2 (FastEthernet0/1), d=20.20.20.230 (FastEthernet0/0), g=20.20.20.230, len 100, forward
    *Nov 16 18:14:20.954: ICMP type=0, code=0
    *Nov 16 18:14:20.954: IP: s=10.10.20.2 (FastEthernet0/1), d=20.20.20.230 (FastEthernet0/0), len 100, sending full packet
    *Nov 16 18:14:20.954: ICMP type=0, code=0
    R1#
    R1#show ip nat trans
    Pro Inside global Inside local Outside local Outside global
    icmp 10.10.10.3:87 10.10.10.3:87 192.168.1.72:87 20.20.20.230:87
    icmp 10.10.20.2:88 10.10.20.2:88 192.168.1.72:88 20.20.20.230:88
    --- --- --- 192.168.1.72 20.20.20.230

  • #5056 PumpkinSeed addikt jerry311 #5055
    Új Válasz #5056
    Új hozzászólás
    Összes hozzászólása itt Válaszok az összes hozzászólására itt Válaszok erre a hozzászólásra
    Privát üzenet küldése

    PumpkinSeed

    addikt

    válasz jerry311 #5055 üzenetére

    Néhány órai szerelés:

Új hozzászólás Aktív témák