rule 5 permit source 192.168.66.0 0.0.0.255
[Router] nat address-group 1 106.3.45.3 106.3.45.4 //配置NAT地址池
[Router] interface GigabitEthernet 0/0/1
[Router-GigabitEthernet 0/0/1] ip address 106.3.45.2 255.255.255.0
[Router-GigabitEthernet 0/0/1] nat outbound 2000 address-group 1 //在出接口上配置NAT Outbound
[Router] interface GigabitEthernet 0/0/2
[Router-GigabitEthernet 0/0/2] ip address 192.168.20.1
255.255.255.0 //配置内网网关的IP地址