端口映射问题

作者:思科培训 来源:来自网络 发布时间:10-01-09

学员提问:

原来上网是这样设置的:
interface fa0/1
ip address 219.1X4.XXX.68 255.255.255.0
ip nat outside
  full-duplex
  interface fa0/0
  ip address 192.168.2.1 255.255.255.0
  ip nat inside
  full-duplex
   access-list 1 permit 192.168.2.0 255.255.255.0
ip nat pool intoout 219.1X4.XXX.68 219.1X4.XXX.68 netmask 255.255.255.0
  ip nat inside source list 1 pool intoout Overload
ip route 0.0.0.0 0.0.0.0 219.1X4.XXX.1

现在我想把外网访问广域网IP219.1X4.XXX.68的6696端口,映射到192.168.2.3的6696端口做web(内网访问192.168.2.3:6696正常),我这样操作:
ip nat inside source static tcp 192.168.2.3 6696 219.1X4.XXX.68 6696 extendable
虽然show ip nat tra的结果显示
tcp 219.1X4.XXX.68 6696 192.168.2.3 6696
udp 219.1X4.XXX.68 6696 192.168.2.3 6696
但是外网访问219.1X4.XXX.68:6696 没有成功,这是什么原因?

 

捷盈讲师及学员解答:

不要加extendable,而且你如果是在内网访问的话不能用外网IP的。