配置IP地址池1，包括兩個公網地址202.38.1.2和202.38.1.3。

<Router> system-view

[Router] nat address-group 1 202.38.1.2 202.38.1.3

# 配置訪問控制列表2001，僅允許內部網路中10.110.10.0/24網段的使用者可以訪問Internet。

[Router] acl number 2001

[Router-acl-basic-2001] rule permit source 10.110.10.0 0.0.0.255

[Router-acl-basic-2001] rule deny

[Router-acl-basic-2001] quit

# 在出介面GigabitEthernet1/2上配置ACL 2001與IP地址池1相關聯。

[Router] interface gigabitethernet 1/2

[Router-GigabitEthernet1/2] ip address 202.38.1.4 24

[Router-GigabitEthernet1/2] nat outbound 2001 (可有可無)address-group 1

[Router-GigabitEthernet1/2] quit