資源描述:
《華為nat配置實(shí)例》由會(huì)員上傳分享,免費(fèi)在線閱讀,更多相關(guān)內(nèi)容在工程資料-天天文庫(kù)。
1、窗體頂端NAT【Router】當(dāng)前路由器提示視圖依次輸入的配置命令,重要的命令紅色突出顯示簡(jiǎn)單說(shuō)明[Quidway]aclnumber2000[Quidway-acl-basic-2000]rulepermitsource10.124.187.00.0.0.255配置允許進(jìn)行NAT轉(zhuǎn)換的內(nèi)網(wǎng)地址段[Quidway-acl-basic-2000]ruledeny[Quidway]interfaceEthernet0/1[Quidway-Ethernet0/1]ipaddress10.124.187.1255.0.0.0內(nèi)網(wǎng)網(wǎng)關(guān)[Quidway]interfaceEthernet0/0[Qu
2、idway-Ethernet0/1]ipaddress10.124.1.1255.255.255.248[Quidway-Ethernet0/1]natoutbound2000在出接口上進(jìn)行NAT轉(zhuǎn)換[Quidway]iproute-static0.0.0.00.0.0.0101.1.1.1preference60配置默認(rèn)路由華為路由器單臂路由配置實(shí)例組網(wǎng)描述:PC---------------------3050C-------------------------AR28-31-------------------------INTERNET組網(wǎng)實(shí)現(xiàn):3050C上劃分多個(gè)VLAN,在A
3、R28-31上終結(jié)VLAN信息,下面的所有VLAN中的PC都可以上公網(wǎng),所有的PC機(jī)都通過(guò)AR28-31分配IP地址和DNS[AR28-31]discu#sysnameQuidway#FTPserverenable#nataddress-group0222.222.222.2222.222.222.10????用于上公網(wǎng)的地址池#radiusschemesystem#domainsystem#local-useradminpasswordcipher.]@USE=B,53Q=^Q`MAF4<1!!service-typetelnetterminallevel3service-typeft
4、plocal-userhuawei????????????????????????????????????telnet用戶,用于遠(yuǎn)程管理passwordsimplehuaweiservice-typetelnetlevel3#dhcpserverip-pool10??????????????????????????????為VLAN10分配IP地址network192.168.10.0mask255.255.255.0gateway-list192.168.10.1dns-list100.100.100.100#dhcpserverip-pool20???????????????????
5、???????????為VLAN20分配IP地址network192.168.20.0mask255.255.255.0gateway-list192.168.20.1dns-list100.100.100.100#dhcpserverip-pool30??????????????????????????????為VLAN30分配IP地址network192.168.30.0mask255.255.255.0gateway-list192.168.30.1dns-list100.100.100.100#dhcpserverip-pool40????????????????????????
6、??????為VLAN40分配IP地址network192.168.40.0mask255.255.255.0gateway-list192.168.40.1dns-list100.100.100.100#interfaceAux0asyncmodeflow#interfaceEthernet1/0??????????????????????????????用于與交換機(jī)的管理IP互通ipaddress192.168.100.1255.255.255.0firewallpacket-filter3000inbound#interfaceEthernet1/0.1??????????????
7、??????????????終結(jié)交換機(jī)上的VLAN10tcpmss1024ipaddress192.168.10.1255.255.255.0firewallpacket-filter3000inboundvlan-typedot1qvid10#interfaceEthernet1/0.2????????????????????????????終結(jié)交換機(jī)上的VLAN20tcpmss1024ipaddress192.168.20.12