Base de Conhecimento

This page is read only. You can view the source, but not change it. Ask your administrator if you think this is wrong.
====== DHCP e NAT em Router Cisco vIOS ======

===== Cenário =====

{{:cisco_dhcp_nat.png|}}

===== Desabilitando os logs do console =====

<code bash>
Router>enable
Router#configure terminal
Router(config)#no logging console
</code>

===== Configurando a interface WAN =====

<code bash>
Router(config)#do show ip interface brief 
Interface                  IP-Address      OK? Method Status                Protocol
GigabitEthernet0/0         unassigned      YES unset  administratively down down    
GigabitEthernet0/1         unassigned      YES unset  administratively down down    
GigabitEthernet0/2         unassigned      YES unset  administratively down down    
GigabitEthernet0/3         unassigned      YES unset  administratively down down 
</code>

<code bash>
Router(config)#interface gigabitEthernet 0/0
Router(config-if)#ip address dhcp 
Router(config-if)#description WANInterface
Router(config-if)#no shutdown 
Router(config-if)#ip nat outside
</code>

<code bash>
Router(config-if)#do show ip interface brief
Interface                  IP-Address      OK? Method Status                Protocol
GigabitEthernet0/0         192.168.122.60  YES DHCP   up                    up      
GigabitEthernet0/1         unassigned      YES unset  administratively down down    
GigabitEthernet0/2         unassigned      YES unset  administratively down down    
GigabitEthernet0/3         unassigned      YES unset  administratively down down    
NVI0                       192.168.122.60  YES unset  up                    up 
</code>

===== Configurando a interface LAN =====
<code bash>
Router(config-if)#interface GigabitEthernet0/1
Router(config-if)#ip address 172.16.100.1 255.255.255.0
Router(config-if)#description LANInterface
Router(config-if)#ip nat inside 
Router(config-if)#no shutdown 
Router(config-if)#exit
</code>

<code bash>
Router(config)#do show ip interface brief
Interface                  IP-Address      OK? Method Status                Protocol
GigabitEthernet0/0         192.168.122.60  YES DHCP   up                    up      
GigabitEthernet0/1         172.16.100.1    YES manual up                    up      
GigabitEthernet0/2         unassigned      YES unset  administratively down down    
GigabitEthernet0/3         unassigned      YES unset  administratively down down    
NVI0                       192.168.122.60  YES unset  up                    up
</code>

===== Configurando o DHCP Server =====
<code bash>
Router(config)#ip dhcp excluded-address 172.16.100.1
Router(config)#ip dhcp pool LAN
Router(dhcp-config)#default-router 172.16.100.1
Router(dhcp-config)#network 172.16.100.0 /24
Router(dhcp-config)#dns-server 192.168.122.1
Router(dhcp-config)#exit
Router(config)#ip access-list standard 1
Router(config-std-nacl)#permit 172.16.100.0 0.0.0.255
Router(config-std-nacl)#exit
</code>

===== Configurando o NAT =====
<code bash>
Router(config)#ip nat inside source list 1 interface gigabitEthernet 0/0 overload
Router(config)#exit
</code>

===== Testando o DHCP e o NAT no cliente =====
<code bash>
VPCS> ip dhcp  
DDORA IP 172.16.100.2/24 GW 172.16.100.1
</code>

<code bash>
VPCS> show ip  

NAME        : VPCS[1]
IP/MASK     : 172.16.100.2/24
GATEWAY     : 172.16.100.1
DNS         : 192.168.122.1  
DHCP SERVER : 172.16.100.1
DHCP LEASE  : 86372, 86400/43200/75600
MAC         : 00:50:79:66:68:03
LPORT       : 20000
RHOST:PORT  : 127.0.0.1:30000
MTU         : 1500
</code>

<code bash>
VPCS> ping 172.16.100.1 -c2

84 bytes from 172.16.100.1 icmp_seq=1 ttl=255 time=4.149 ms
84 bytes from 172.16.100.1 icmp_seq=2 ttl=255 time=5.572 ms
84 bytes from 172.16.100.1 icmp_seq=3 ttl=255 time=5.348 ms
84 bytes from 172.16.100.1 icmp_seq=4 ttl=255 time=5.668 ms
84 bytes from 172.16.100.1 icmp_seq=5 ttl=255 time=7.743 ms
</code>

<code bash>
VPCS> ping 1.1.1.1         

84 bytes from 1.1.1.1 icmp_seq=1 ttl=55 time=29.517 ms
84 bytes from 1.1.1.1 icmp_seq=2 ttl=55 time=28.627 ms
84 bytes from 1.1.1.1 icmp_seq=3 ttl=55 time=29.712 ms
84 bytes from 1.1.1.1 icmp_seq=4 ttl=55 time=28.939 ms
84 bytes from 1.1.1.1 icmp_seq=5 ttl=55 time=26.362 ms
</code>

<code bash>
VPCS> ping google.com.br
google.com.br resolved to 142.250.219.163

84 bytes from 142.250.219.163 icmp_seq=1 ttl=116 time=38.060 ms
84 bytes from 142.250.219.163 icmp_seq=2 ttl=116 time=40.623 ms
84 bytes from 142.250.219.163 icmp_seq=3 ttl=116 time=40.060 ms
84 bytes from 142.250.219.163 icmp_seq=4 ttl=116 time=42.785 ms
84 bytes from 142.250.219.163 icmp_seq=5 ttl=116 time=38.844 ms
</code>

<code bash>
Router#show ip nat translations 
Pro Inside global      Inside local       Outside local      Outside global
icmp 192.168.122.60:35187 172.16.100.2:35187 142.250.219.163:35187 142.250.219.163:35187
icmp 192.168.122.60:35443 172.16.100.2:35443 142.250.219.163:35443 142.250.219.163:35443
icmp 192.168.122.60:35699 172.16.100.2:35699 142.250.219.163:35699 142.250.219.163:35699
icmp 192.168.122.60:35955 172.16.100.2:35955 142.250.219.163:35955 142.250.219.163:35955
icmp 192.168.122.60:36211 172.16.100.2:36211 142.250.219.163:36211 142.250.219.163:36211
udp 192.168.122.60:41488 172.16.100.2:41488 192.168.122.1:53 192.168.122.1:53
</code>

===== Referências =====
  - [[https://www.youtube.com/watch?v=zu9hgRzzwG0|NAT ( PAT ) CONFIGURATION ON EVE-NG]]