华为AR2220路由器(标配3个端口)配置两外网两内网求助 华为AR2220路由器配置端口映射问题
\u534e\u4e3aAR2220\u8def\u7531\u5668(\u6807\u914d3\u4e2a\u7aef\u53e3)\u914d\u7f6e
1. Router\u7684\u914d\u7f6e#sysname Router# acl number 3000rule 5 permit source 192.168.1.1 0.0.0.0 # acl number 3001rule 5 permit source 192.168.1.2 0.0.0.0 # traffic classifier testA operator orif-match acl 3000 traffic classifier testB operator orif-match acl 3001 # traffic behavior testAredirect ip-nexthop 202.168.100.1 traffic behavior testBredirect ip-nexthop 202.168.100.2 # traffic policy testclassifier testA behavior testAclassifier testB behavior testB //\u914d\u7f6e\u91cd\u5b9a\u5411\uff0c\u5b9e\u73b0\u4e3a\u6765\u81eaInternet\u4e0d\u540c\u63a5\u53e3\u7684\u62a5\u6587\u4ecd\u7136\u4ece\u6b64\u63a5\u53e3\u6620\u5c04\u51fa\u53bb # interface GigabitEthernet1/0/0ip address 202.168.100.1 255.255.255.0nat static protocol tcp global current-interface 8080 inside 192.168.1.1 ftp netmask 255.255.255.255 # interface GigabitEthernet2/0/0ip address 202.168.100.2 255.255.255.0nat static protocol tcp global current-interface 8080 inside 192.168.1.2 ftp netmask 255.255.255.255 //\u914d\u7f6eNAT Static\uff0c\u5b9e\u73b0\u5916\u7f51\u7528\u6237\u8bbf\u95ee\u5185\u7f51\u670d\u52a1\u5668# interface GigabitEthernet3/0/0ip address 192.168.100.1 255.255.255.0traffic-policy test inbound # ip route-static 0.0.0.0 0.0.0.0 202.168.100.1 ip route-static 0.0.0.0 0.0.0.0 202.168.100.2 //\u914d\u7f6e\u7b49\u4ef7\u8def\u7531\u5b9e\u73b0NAT\u53cc\u4e0a\u884c# return 2. \u68c0\u67e5\u914d\u7f6e\u7ed3\u679c\u3002Internet\u4e0a\u7528\u6237\u80fd\u591f\u6b63\u5e38\u8bbf\u95eeFTP\u670d\u52a1\u5668\u3002\u914d\u7f6e\u6ce8\u610f\u4e8b\u9879
#
acl number 2000 //\u914d\u7f6e\u5141\u8bb8\u8fdb\u884cNAT\u8f6c\u6362\u7684\u5185\u7f51\u5730\u5740\u6bb5
rule 5 permit source 192.168.1.0 0.0.0.255
#
interface GigabitEthernet3/0/0 //\u5916\u7f51\u53e3
ip address 183.81.181.116 255.255.255.0
nat outbound 2000 address-group 1 //\u5728\u51fa\u63a5\u53e3\u4e0a\u914d\u7f6eNAT Outbound
nat server protocol tcp global 183.81.181.116 www inside 192.168.1.200 80 //\u5728\u51fa\u63a5\u53e3\u4e0a\u914d\u7f6e\u5185\u7f51\u670d\u52a1\u5668192.168.1.200\u7684www\u670d\u52a1
#
nat address-group 1 183.81.181.116 183.81.181.116 //\u914d\u7f6eNAT\u5730\u5740\u6c60
#
ip route-static 0.0.0.0 0.0.0.0 X.X.X.X //\u914d\u7f6e\u9ed8\u8ba4\u8def\u7531 \u4e0b\u4e00\u8df3\u3002
\u8fd9\u6837\u5185\u7f51\u53ef\u4ee5\u8bbf\u95eeInternet\uff0c\u800c\u4e14\u5916\u7f51\u53ef\u4ee5\u901a\u8fc7\u516c\u7f51\u8bbf\u95ee\u670d\u52a1\u5668\u3002
图1 配置通过重定向实现NAT双上行组网图
操作步骤
1. Router的配置
#
sysname Router
#
acl number 3000
rule 5 permit source 192.168.1.1 0.0.0.0
#
acl number 3001
rule 5 permit source 192.168.1.2 0.0.0.0
#
traffic classifier testA operator or
if-match acl 3000
traffic classifier testB operator or
if-match acl 3001
#
traffic behavior testA
redirect ip-nexthop 202.168.100.1
traffic behavior testB
redirect ip-nexthop 202.168.100.2
#
traffic policy test
classifier testA behavior testA
classifier testB behavior testB //配置重定向，实现为来自Internet不同接口的报文仍然从此接口映射出去
#
interface GigabitEthernet1/0/0
ip address 202.168.100.1 255.255.255.0
nat static protocol tcp global current-interface 8080 inside 192.168.1.1 ftp netmask 255.255.255.255
#
interface GigabitEthernet2/0/0
ip address 202.168.100.2 255.255.255.0
nat static protocol tcp global current-interface 8080 inside 192.168.1.2 ftp netmask 255.255.255.255 //配置NAT Static，实现外网用户访问内网服务器
#
interface GigabitEthernet3/0/0
ip address 192.168.100.1 255.255.255.0
traffic-policy test inbound
#
ip route-static 0.0.0.0 0.0.0.0 202.168.100.1
ip route-static 0.0.0.0 0.0.0.0 202.168.100.2 //配置等价路由实现NAT双上行
#
return
2. 检查配置结果。
Internet上用户能够正常访问FTP服务器。
配置注意事项
无
都是基础配置，应该好好学学ipv6了，，，这些快淘汰了
绛旓細1. Router鐨勯厤缃#sysname Router# acl number 3000rule 5 permit source 192.168.1.1 0.0.0.0 # acl number 3001rule 5 permit source 192.168.1.2
绛旓細Router浣滀负浼佷笟鍑哄彛缃戝叧锛岄氳繃鎺ュ彛GE1/0/0鍜屾帴鍙E2/0/0瀹炵幇鍙屼笂琛屻傚悓鏃讹紝閫氳繃閰嶇疆NAT瀹炵幇绉佺綉鍦板潃鍒板叕缃戝湴鍧鐨勮浆鎹備紒涓氬笇鏈涘澶栫綉鐢ㄦ埛鎻愪緵FTP鏈嶅姟鍣鐨勮闂姛鑳姐侳TP鏈嶅姟鍣ㄩ厤缃簡涓や釜IP鍦板潃锛192.168.1.1/24鍜192.168.1.2/24銆傚浘1 閰嶇疆閫氳繃閲嶅畾鍚戝疄鐜癗AT鍙屼笂琛岀粍缃戝浘 鎿嶄綔姝ラ 1. Router鐨...
绛旓細鍒掑垎涓嶄簡鐨勩備綘杩欎釜ar璺敱鍣閮芥槸3灞傛帴鍙ｏ紝涓嶈兘鍒掑垎缃戞銆
绛旓細璺敱鍣绫诲瀷锛氫紒涓氱骇璺敱鍣ㄧ鍙ｇ粨鏋勶細妯″潡鍖栧叾瀹冪鍙ｏ細3涓狦E锛1涓狢ombo锛2涓猆SB2.0绔彛1涓狹ini-USB鎺у埗鍙扮鍙1涓覆琛岃緟鍔/鎺у埗鍙扮鍙ｆ墿灞曟ā鍧楋細4涓猄IC鎻掓Ы+2涓猈SIC鎻掓Ы+1涓狣SP鎻掓Ы 闃茬伀澧欙細鍐呯疆闃茬伀澧橯os鏀寔锛氭敮鎸乂PN鏀寔锛氭敮鎸佺綉缁滃畨鍏細ACL銆侀槻鐏銆802.1x璁よ瘉銆丮AC鍦板潃璁よ瘉銆乄eb璁よ瘉銆丄AA璁よ瘉銆...
绛旓細闇瑕佸厜鐚殑銆傚厜鐚槸杩愯惀鍟嗙殑鎷ㄥ彿涓婄綉璁惧锛岃繍钀ュ晢鎻愪緵锛璺敱鍣鏄笂缃戠鐞嗕笌鎵╁睍璁惧锛岀敤鎴锋彁渚涖傝繛鎺ュ涓嬪浘锛氫笂缃戦渶瑕佸鐢佃剳鍜岃矾鐢卞櫒杩涜姝ｇ‘鐨勮缃1銆佸皢瀹藉甫涓荤綉绾挎彃鍏ョ尗鐨刉LAN鍙ｏ紝鐚殑鍑虹嚎鎺ヨ矾鐢卞櫒鐨剋lan鍙ｏ紝鐢ㄤ竴鏍圭綉绾垮皢璺敱鍣ㄧ殑lan鍙ｅ拰璁＄畻鏈虹浉杩炪2銆佸崟鍑荤數鑴戞闈㈠乏涓嬭鐨勫紑濮嬧斺旀帶鍒堕潰鏉库斺...
绛旓細杩欐槸璺敱鍣锛屼笉鏄氦鎹㈡満锛岃矾鐢辩殑绔彛榛樿閮芥槸璺敱妯″紡锛屼笉鏄氦鎹㈡ā寮忥紝瑕佸厛鎶婄鍙ｆ敼鎴愪氦鎹㈡ā寮忔墠鑳介厤杩欎簺鍛戒护銆
绛旓細AR2220-S鏄ā鍧楀寲璺敱鍣锛屽熀鏈厤缃彲鏀寔3涓狶AN鍙ｏ紝鍏ㄩ儴閰嶇疆鍙敮鎸23涓狶AN鍙ｏ紱AR2204-S濂藉儚鏄笉鏀寔鎵╁睍锛岃亴鑳芥敮鎸4涓狶AN鍙
绛旓細缃戠嚎杩炴帴usg2220鐨刧0/0/0绔彛锛涢厤缃甶p鍦板潃鍦ㄨ矾鐢卞櫒瀵瑰簲缃戞锛沺ing涓嬮槻鐏ip锛岀湅鑳戒笉鑳借繛閫氾紱3.WEB鐣岄潰鐧诲綍 璺敱鍣ㄥ拰浜ゆ崲鏈虹殑鐧诲綍鏂瑰紡锛圓R绯诲垪璺敱鍣鍜孲绯诲垪浜ゆ崲鏈猴級宸ヤ綔绔欑敤http://172.16.100.25 鐧诲綍web鐣岄潰 //闃茬伀澧欑殑鐧诲綍鏂瑰紡锛圲SG闃茬伀澧欑郴缁燂級閫氳繃GigabitEthernet0/0/0鎺ュ彛锛屽伐浣滅珯鐢╤ttp://...
绛旓細鍗庝负AR2220鏄竴娆惧涓氬姟鍚堜竴鐨璺敱鍣锛屾帴鍙ｄ赴瀵岋紝渚夸簬杩炴帴锛屾ц兘棰嗗厛锛岄噰鐢ㄤ赴瀵岀殑璇煶浣撻獙锛岄傜敤浜庡绉嶅満鎵銆傚崕涓篈R2220鍦ㄤ腑鍏虫潙鍦ㄧ嚎璁よ瘉缁忛攢鍟嗚嫃宸炴濊秺缃戠粶鎶鏈湁闄愬叕鍙哥殑淇冮攢浠蜂负6000鍏冦傚崕涓篈R2220闆嗚矾鐢便佷氦鎹3G銆佽闊炽佸畨鍏ㄧ瓑鍔熻兘浜庝竴韬紝閲囩敤澶氭牳CPU鍜屾棤闃诲浜ゆ崲鏋舵瀯锛屽嚟鍊熼鍏堜簬涓氱晫鐨勭郴缁熸ц兘鍜屽彲...
绛旓細1.鎵撳紑娴忚鍣紝杈撳叆璺敱鍣IP: 192.168.1.1鍥炶溅锛屽湪鐧诲綍妗嗕腑杈撳叆绠＄悊鍛樿处鍙枫2.鍦ㄥ乏渚ц彍鍗曟爮锛岀偣鍑昏彍鍗曗淚P甯﹀鎺у埗鈥濓紝杩涘叆甯﹀鎿嶄綔鐣岄潰銆3.鍦ㄩ〉闈腑鏄剧ず浜嗗凡璁剧疆鐨勫甫瀹戒俊鎭紝鍦ㄩ檺閫熷垪琛ㄤ笅鏂癸紝鐐瑰嚮鈥滄坊鍔犳柊鏉＄洰鈥濇寜閽4.鍦ㄦ柊鏉＄洰璁剧疆涓紝杈撳叆IP鐨勫湴鍧鐨勮寖鍥达紝濡傛灉鍙槸鍗曠嫭鐨処P锛屽氨鍦ㄨ捣濮嬪湴鍧濉啓灏...
