cisco2600的eth0/1 ip地址改变配置问题

吹动的电扇

我公司网络情况如下:

光纤接入cisco 2600,cisco2600接netscren-10防火墙,防火墙接一杂牌交换机,交换机直接到桌面.

桌面pc,ip在172.17.0.1~254,一台服务器提供www,ftp服务,cisco2600 eth0/0 172.16.0.1/24 eth0/1 218.94.35.51/28

现因搬家所以光纤接入的ip 发生变化,但pc的设置不想有所变动,问是否只把cisco2600的eth0/1 ip地址改变即可,防火墙交换机设置是否需要改变!
以下是cisco2600的show run

具体哪里需要改变希望把详细配置步骤写下,我基本上是一点也不懂,如新的外网ip为 218.92.33.11
请各位指点................ 谢谢!


User Access Verification

Username: ****
Password: ****
JHGS_router>;en
Password: ****
JHGS_router#show run
Building configuration...

Current configuration : 1236 bytes
!
version 12.3
service timestamps debug datetime msec
service timestamps log datetime msec
no service password-encryption
!
hostname jsjh_router
!
boot-start-marker
boot-end-marker
!
enable secret *****
!
username **** password ****
no aaa new-model
ip subnet-zero
!
!
!
!
no ftp-server write-enable
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
interface FastEthernet0/0
ip address 172.16.0.1 255.255.255.0
ip nat inside
duplex auto
speed auto
!
interface FastEthernet0/1
ip address 218.94.35.51 255.255.255.240
ip nat outside
duplex auto
speed auto
!
ip nat inside source list 1 interface FastEthernet0/1 overload
ip nat inside source static tcp 172.16.0.254 21 218.94.35.51 21 extendable
ip nat inside source static tcp 172.16.0.254 25 218.94.35.51 25 extendable
ip nat inside source static tcp 172.16.0.254 80 218.94.35.51 80 extendable
ip nat inside source static tcp 172.16.0.254 110 218.94.35.51 110 extendable
ip nat inside source static tcp 172.16.0.254 8080 218.94.35.51 8080 extendable
ip classless
ip route 0.0.0.0 0.0.0.0 218.94.35.49
no ip http server
!
!
access-list 1 permit 172.16.0.0 0.0.0.255
!
!
control-plane
!
!
!
!
!
!
!
!
line con 0
line aux 0
line vty 0 4
login local
!
!
!
end


FastEthernet0/0 is up, line protocol is up
Hardware is AmdFE, address is 000e.d759.b1e0 (bia 000e.d759.b1e0)
Internet address is 172.16.0.1/24
MTU 1500 bytes, BW 10000 Kbit, DLY 1000 usec,
reliability 255/255, txload 1/255, rxload 4/255
Encapsulation ARPA, loopback not set
Keepalive set (10 sec)
Half-duplex, 10Mb/s, 100BaseTX/FX
ARP type: ARPA, ARP Timeout 04:00:00
Last input 00:00:07, output 00:00:00, output hang never
Last clearing of "show interface" counters never
Input queue: 0/75/2079/0 (size/max/drops/flushes); Total output drops: 0
Queueing strategy: fifo
Output queue: 0/40 (size/max)
5 minute input rate 17duplex, 100Mb/s, 100BaseTX/FX
ARP type: ARPA, ARP Timeout 04:00:00
Last input 00:00:00, output 00:00:00, output hang never
Last clearing of "show interface" counters never
Input queue: 0/75/28/0 (size/max/drops/flushes); Total output drops: 0
Queueing strategy: fifo
Output queue: 0/40 (size/max)
5 minute input rate 6000 bits/sec, 13 packets/sec
5 minute output rate 173000 bits/sec, 18 packets/sec
28066950 packets input, 2402531475 bytes
Received 498232 broadcasts, 0 runts, 0 giants, 0 throttles
0 input errors, 0 CRC, 0 frame, 0 overrun, 0 ignored
0 watchdog
0 input packets with dribble condition detected
57355138 packets output, 3067303171 bytes, 0 underruns
0 output errors, 0 collisions, 2 interface resets
0 babbles, 0 late collision, 0 deferred
26 lost carrier, 0 no carrier
0 output buffer failures, 0 output buffers swapped out



show version
Cisco IOS Software, C2600 Software (C2600-IPVOICE-M), Version 12.3(4)T6, RELEAS
E SOFTWARE (fc1)
Technical Support: http://www.cisco.com/techsupport
Copyright (c) 1986-May-04 21:46 by eaarmas

ROM: System Bootstrap, Version 12.2(8r) , RELEASE SOFTWARE (fc1)

JHGS_router uptime is 12 weeks, 4 days, 22 hours, 25 minutes
System returned to ROM by power-on
System image file is "flash:c2600-ipvoice-mz.123-4.T6.bin"

Cisco 2621XM (MPC860P) processor (revision 0x10-22 09:29

网友1：

有不少要改滴~
FastEthernet0/1 的IP
还有你做的那些static。
防火墙的route 等

网友2

需要改的地方:
interface FastEthernet0/1
ip address 218.94.35.51 255.255.255.240

ip nat inside source static tcp 172.16.0.254 21 218.94.35.51 21 extendable
ip nat inside source static tcp 172.16.0.254 25 218.94.35.51 25 extendable
ip nat inside source static tcp 172.16.0.254 80 218.94.35.51 80 extendable
ip nat inside source static tcp 172.16.0.254 110 218.94.35.51 110 extendable
ip nat inside source static tcp 172.16.0.254 8080 218.94.35.51 8080 extendable
将上面的218.94.35.51的地方改为新的外网IP;

ip route 0.0.0.0 0.0.0.0 218.94.35.49 ,改为新的网关就行了.

网友3：

你公司有多少台机器？不建议把NAT做在CISCO26系列路由器上，这样会对Router的负荷加大，极大的钳制了网络带宽。 NETSCREEN也可以做NAT，最好的办法是在杂牌交换机上单独接一台PC机装LINUX用IPTABLES来做NAT，配置只要满足P2 400CPU 128RAM，双INTEL或3COM网卡，800MBHDD就可以了。这样更加安全可靠，以后遇到调整也方便。当然如果你要保持原状的话，只需要把 interface FastEthernet0/1口的IP地址改为新的IP地址，把原有默认路由网关no掉，然后重新指一条默认路由到新的ip地址。同理也要把你原来的那 些ip nat .............等全部no掉，然后重新添加把最后目标地址改为新的ip地址。然后wr保存，reload一次，应该就OK了！


网友4：

需要改的地方:
interface FastEthernet0/1
ip address 218.94.35.51 255.255.255.240

ip nat inside source static tcp 172.16.0.254 21 218.94.35.51 21 extendable
ip nat inside source static tcp 172...........
同意这个做法～～
不过还是对于端口的用法应该用动态的地址池或者是ＰＡＴ端口号是否会好点～～～