路由器的网络地址转换、管理登陆限制、MAC与IP的绑定

　　 
　　interface FastEthernet0/0
　　ip address 10.1.5.130 255.255.255.252
　　ip aclearcase/" target="_blank" >ccess-group 102 in
　　ip access-group 105 out
　　ip nat outside
　　duplex auto
　　speed auto
　　!

　　interface FastEthernet0/1
　　ip address 158.88.0.254 255.255.0.0
　　ip access-group 102 in
　　ip nat inside
　　speed auto
　　full-duplex
　　!
　　ip nat pool globalpool 10.1.5.130 10.1.5.130 netmask 255.255.255.252
　　ip nat inside source list 1 pool globalpool overload
　　ip classless
　　ip route 0.0.0.0 0.0.0.0 10.1.5.129
　　no ip http server
　　ip pim bidir-enable
　　!
　　logging trap debugging
　　logging 158.88.0.224
　　logging 158.88.0.222
　　access-list 1 permit 158.88.0.222
　　access-list 1 permit 158.88.0.223
　　access-list 1 permit 158.88.0.224
　　access-list 1 permit 158.88.0.2
　　access-list 1 permit 158.88.0.1
　　access-list 1 permit 158.88.0.15
　　access-list 1 permit 158.88.0.18
　　access-list 1 permit 158.88.0.28
　　access-list 1 permit 158.88.0.48
　　access-list 102 permit tcp host 158.88.0.222 host 158.88.0.254 eq telnet
　　access-list 102 deny tcp any host 158.88.0.254 eq telnet
　　access-list 102 deny tcp any host 10.1.5.130 eq telnet
　　access-list 102 permit ip any any
　　arp 158.88.0.222 0002.3f70.4116 ARPA
　　arp 158.88.0.223 0004.2306.601d ARPA
　　arp 158.88.0.224 0050.ba7c.adcd ARPA
　　arp 158.88.0.224 0050.ba7c.adcd ARPA
　　arp 158.88.0.2 0001.0345.f79f ARPA
　　arp 158.88.0.1 0004.2306.6062 ARPA
　　arp 158.88.0.15 0004.2310.6aa0 ARPA
　　arp 158.88.0.18 0004.2306.6078 ARPA
　　arp 158.88.0.28 0004.2307.2a82 ARPA
　　arp 158.88.0.48 0004.2306.d10d ARPA
　　!
　　line con 0
　　password 7 120F0A1F1B0F09142B
　　line 33 48
　　line aux 0
　　password 7 07192E44470D1C1516
　　line vty 0 4
　　password 7 120F0A1F1B0F09142B

原文转自：http://www.ltesting.net