PIX 7.2 PAT

Pix上的配置

interface Ethernet0
 nameif outside
 security-level 0
 ip address 100.100.100.1 255.255.255.252
!

interface Ethernet1
 nameif inside
 security-level 100
 ip address 172.16.10.1 255.255.255.0
!

access-list intoout extended permit ip 172.16.10.0 255.255.255.0 any
global (outside) 1 interface
nat (inside) 1 access-list intoout

!

access-list ping extended permit icmp any any

access-group ping in interface outside

route outside 0.0.0.0 0.0.0.0 100.100.100.2

Remote路由器

interface Loopback0
 ip address 4.4.4.4 255.255.255.0
!
interface FastEthernet0/0
 ip address 100.100.100.2 255.255.255.252
 duplex auto
 speed auto
!

!        
line con 0
 exec-timeout 0 0
 logging synchronous
line aux 0
line vty 0 4
 no login

Local路由器

!
interface FastEthernet0/0
 ip address 172.16.10.3 255.255.255.0

!

ip default-gateway 172.16.10.1

测试