思科路由器不同内网地址通过不同公网地址访问互联网

公网地址：117.28.XXX.173，117.28.XXX.174
公网网关：117.28.XXX.169

目标：
10.77.26.176/28 走117.28.XXX.174出外网
10.77.0.0/16 走117.28.XXX.173出外网

主要配置：（动态NAT转换）

interface FastEthernet0/0
 description Lan
 ip address 10.77.0.235 255.255.255.0
 ip nat inside

interface FastEthernet0/1
 description Wan
 ip address 117.28.XXX.173 255.255.255.248
 ip nat outside

access-list 101 deny ip 10.77.26.176 0.0.0.15 any #排除10.77.26.176/28
access-list 101 permit ip 10.77.0.0 0.0.255.255 any
access-list 102 permit ip 10.77.26.176 0.0.0.15 any
ip nat pool dwpool1 117.28.XXX.173 117.28.XXX.173 netmask 255.255.255.248
ip nat pool dwpool2 117.28.XXX.174 117.28.XXX.174 netmask 255.255.255.248
ip nat inside source list 101 pool dwpool1 overload
ip nat inside source list 102 pool dwpool2 overload
ip route 0.0.0.0 0.0.0.0 117.28.XXX.169

 

参考：

https://community.cisco.com/t5/routing/multiple-wan-ip-addresses-and-multiple-inside-hosts/td-p/2181351#S211831

https://blog.csdn.net/weixin_46232917/article/details/127045314