使用NAT和STATIC命令配置DNS记录转换

pixfirewall(config)# sh run

interface Ethernet0
 nameif inside
 security-level 100
 ip address 172.16.1.1 255.255.255.0
!
interface Ethernet1
 nameif outside
 security-level 0
 ip address 192.168.1.1 255.255.255.0
!
interface Ethernet2
 nameif dmz
 security-level 50
 ip address 10.10.1.1 255.255.255.0
!
access-list 1 extended permit ip any host 192.168.1.111
access-list 1 extended permit ip any host 192.168.1.10

global (outside) 1 192.168.1.111
nat (inside) 1 1.1.0.0 255.255.0.0 dns
static (inside,outside) 192.168.1.10 1.1.10.1 netmask 255.255.255.255 dns     //DNS选项来实现对DNS消息的NAT
access-group 1 in interface outside
route inside 1.1.0.0 255.255.0.0 172.16.1.2 1
route outside 2.2.2.0 255.255.255.0 192.168.1.2 1
route dmz 3.3.3.0 255.255.255.0 10.10.1.2 1

R1#sh run
interface Loopback0
 ip address 1.1.1.1 255.255.255.0
!
interface Loopback2
 ip address 1.1.10.1 255.255.255.0
!
interface FastEthernet0/0
 ip address 172.16.1.2 255.255.255.0
 duplex auto
 speed auto
!
ip route 0.0.0.0 0.0.0.0 172.16.1.1

R2#sh run
interface Loopback0
 ip address 2.2.2.2 255.255.255.0
!        
interface FastEthernet0/0
 ip address 192.168.1.2 255.255.255.0
 duplex auto
 speed auto
!
ip route 0.0.0.0 0.0.0.0 192.168.1.1