ACL和NAT配置

[R1]rip
[R1-rip-1]network 192.168.1.0
[R1-rip-1]network 192.168.2.0
[R2]rip
[R2-rip-1]network 192.168.4.0
[R2-rip-1]network 192.168.3.0
[R2-rip-1]network 192.168.2.0
[R3]rip
[R3-rip-1]network 192.168.3.0
[R3-rip-1]network 192.168.5.0

[R2]acl 3000
[R2-acl-adv-3000]rule 5 deny tcp source 192.168.1.10 0.0.0.0 destination 192.168.4.10 0.0.0.0 destination-port eq ftp
[R2-acl-adv-3000]rule 10 permit ip source any
[R2-acl-adv-3000]int g0/0/0
[R2-GigabitEthernet0/0/0]traffic-filter inbound acl 3000

[R1]acl 2000
[R1-acl-basic-2000]rule 5 permit source 192.168.1.10 0.0.0.255
[R1]nat address-group 1 192.168.2.1 192.168.2.2
[R1]int GigabitEthernet 0/0/1
R1-GigabitEthernet0/0/1]nat outbound 2000 address-group 1 no-pat