（四）出口网络配置
1.北京综合服务中心办公终端可通过出口路由器R2 G 0/0.21子接口的NAPT方式访问互联网。
ip route vrf BG 0.0.0.0 0.0.0.0 GigabitEthernet 0/0.21 21.1.1.1
ip access-list extended 100
10 permit ip 10.1.20.0 0.0.0.255 any
20 permit ip 10.2.20.0 0.0.0.255 any
exit
ip nat pool NAT 21.1.1.3 21.1.1.3 netmask 255.255.255.248
ip nat inside vrf BG source list 100 pool NAT overload
int ran gi 0/1-2
ip nat inside
int ig 0/0.21
ip nat outside
int t 0
ip nat inside
2.上海管理中心局域网管理终端可通过出口路由器R3 NAPT方式访问互联网。
int gi 0/1
ip nat outside
int gi 0/2
ip nat inside
int t 0
ip nat inside
exit
ip access-list extended 100
10 permit ip any any
exit
ip nat inside source static 192.1.100.100 13.1.1.3
ip nat inside source list 100 interface GigabitEthernet 0/1
3.广州生产中心局域网生产终端可通过出口网关GW1/GW2 NAPT方式访问互联网。
GW1
int gi 0/0 
)
)
