配置如下：ip access-list extended 1001 10 permit ip 1.1.1.0 0.0.0.255 any exitinterface fastethernet0 description lan ip address 1.1.1.1 255.255.255.0 ip nat inside exitinterface fastethernet1 description wan ip address 210.1.1.1 255.255.255.248 ip nat outside exitip nat inside source list 1001 interface fastethernet1 overload