«Tarmoq xavfsizligi»

Dinamik NAT bo`yicha ishni bajarish tartibi

12..6 – rasm. Dinamik NAT tamoyili asosida qurilgan tarmoq tuzilishi
Birinchi navbatda Router1 va Router2 larga statik ip route beriladi. Chunki internet qismidagi adreslarni oldindan bilmaymiz.
Router1(config)#ip route 0.0.0.0 0.0.0.0 12..12..12..2
Router2(config)#ip route 0.0.0.0 0.0.0.0 12..12..12..1
195.158.1.1 dan 195.158.1.10 gacha public IP adreslarni tarqatishimiz uchun TATU nomli Pool yaratamiz.
Router(config)#ip nat pool TATU 195.158.1.1 195.158.1.10 netmask 255.255.255.240
LAN tarmoqlar ichida aynan 192.168.1.0/24 tarmoq internetga chiqishi uchun Access list foydalanamiz
Router1(config)#access-list 10 permit 192.168.1.0 0.0.0.255
Access list ni TATU nomli yaratilgan NAT ga biriktiramiz.
Router1(config)#ip nat inside source list 10 pool TATU
Router ning kirish va chiqish portlariga NAT ni biriktiramiz
Router1(config)#interface fastEthernet 0/0
Router1(config-if)#ip nat inside
Router1(config-if)#exit
Router1(config)#interface fastEthernet 0/1
Router1(config-if)#ip nat outside
Router1(config-if)#exit




12..7 Rasm. . Dinamik NAT

Router1# show ip nat translations

Router1#show running-config
12..7-rasm. Manzillarni translatsiyasi bo’yicha olingan natijalar


Topshiriq

• 
  Cisco packet tracer muhiti asosida tarmoqni tuzilishini yarating
  
• 
  Tamoqdag har bir R1, R2 marshrutizatorlarining interfeyslarini sozlang va tekshiring
  
• 
  Dinamik NAT bo`yicha tarmoq konfiguratsiyalarini sozlang va tekshiring
  

13-Laboratoriya ishi
Mavzu: Tarmoqni himoyalash protokollari SCP, SNMP ni sozlash va log fayllarni tadqiq etish
Ishning maqsadi
Ushbu laboratoriya ishi quyidagilar uchun mo’ljallangan:

• 
  tarmoqni himoyalash protokollari SCP, SNMP ni sozlashni o’rganish;
  
• 
  Log fayllarni tadqiq etish. Syslog serverini sozlashni o’rganish.