????(2)??????nat?????????
????????
????global(outside) 1 218.106.236.247-218.106.236.249            //????????????
????nat (inside) 1 192.168.9.0 255.255.255.0           //???????global???????????????192.168.9.0 ??????ε???????218.106.236.247-218.106.236.249???????
????(3) pat (????nat)
?????????ip??????????ip?????????????IP??????????????1024???????????????????????
????global(outside) 1 218.106.236.247                  //????????????
????nat (inside) 1 192.168.9.0 255.255.255.0          //???????global???????????????192.168.9.0 ??????ε???????218.106.236.247?????IP???????????????????????????????
????(4)????nat
????access-list extended net1 permit ip  192.168.9.0 255.255.255.0 host 209.165.200.1    //???????????
????global(outside) 1 209.165.200.100                                                    //??????????
????nat (inside) 1 access-list net1     //??192.168.9.0 ???ε??????? 209.165.200.1??????????????209.165.200.100???ip?????
????(5)?????nat???
??????????????????????????????????outside???????ɡ?
????nat (dmz) 1 192.168.7.0 255.255.255.0 outside    //??dmz????μ???nat ??inside?????
????global(inside) 1 192.168.9.10-192.168.9.20        //??dmz????е?192.168.7.0 ???ε????????????????????????????192.168.9.10-192.168.9.20
????(6)nat 0 ??nat ???
????nat 0 ????????????????????nat????????????????????????????????????????????????????????
????nat (dmz) 0  192.168.0.9 255.255.255.255
??????????nat?????
????nat 0 (nat?????
???????nat????pat  (??static????
?????????? nat  (nat access-list)
????????????nat??pat (nat)
????3??static???????
???????????λ????????????????????????????????????????????????????????????????????????
????(1)???÷?????
????static (real_ifname  mapped_ifname) {mapped_ip|interface}  real_ip  [netmask mask]
????real_ifname :??????????   mapped_ifname:??????????
????mapped_ip:????????ip???  interface:????????       real_ip????????ip???
???????????????????????????????????????????????????????????
???????? static (inside outside)  218.107.233.234  192.167.9.1      //????218.107.233.234?????????????????192.168.9.1???
????(2)?????????
????static (real_ifname  mapped_ifname) {tcp | udp}  {mapped_ip|interface} mapped_port real_ip real_port [netmask mask]
????real_ifname :??????????   mapped_ifname:??????????
????tcp|udp :???????Э????
????mapped_ip:????????ip???  interface:????????  mapped_port:??????????      real_ip????????ip???    real_port:??????????
????????????????????????????static?????????????????????????????????????б????????????????????Щ????????????Щ???????????
????????
????static (inside??outside) tcp interface ftp 192.168.10.4 ftp netmask 255.255.255.255  //??outside???ip?????ftp??????192.168.10.4 ???IP??FTP????
????access-list ftp extended permit tcp any interface outside eq ftp                     //???????????????б????????ftp???????????
????access-group ftp in interface outside                                               //?????????б????????
????4??route ????
????route if_name destination_ip  gateway  [metric]
????if_name:        ?????
????destination_ip: ????
????gateway:        ????
????metric:         ????
????????route outside 0 0 218.102.33.247 1     //?????????? 218.102.33.247 ????????
????route inside 192.168.9.0 255.255.255.0 192.168.10.1   //????????192.168.9.0???ε??????192.168.10.1