H3C—BT+VPN+NAT

《H3C—BT+VPN+NAT》由会员上传分享，免费在线阅读，更多相关内容在教育资源-天天文库。

1、[RA][RA]intG0/0[RA-G0/0]ipadd10.0.0.130255.255.255.192[RA-G0/0]noshutdown[RA-G0/0]intG0/1[RA-G0/1]ipadd202.192.168.10255.255.255.0[RA-G0/1]noshutdown[RA-G0/1]quit[RA]ospf1[RA-ospf]area0[RA-ospf-area-0.0.0.0]network10.0.0.1280.0.0.63[RA-ospf-area-0.0.0.0]network202.192.168.00.0.0.2

2、55[RA]nataddress-group1202.192.168.5202.192.168.10//配置允许进行NAT转换的内网地址段aclnumber2000rule0permitsource10.0.0.00.0.255.255rule1deny#interfaceG0/1portlink-moderoute//在出接口上进行NAT转换natoutbound2000address-group1//在出接口上配置内网服务器10.0.0.14的www服务natserverprotocoltcpglobal202.192.168.5wwwinside10

3、.0.0.66wwwiproute-static0.0.0.00.0.0.0202.192.168.128[RA]time-rangehuawei8:00to12:00working-daytime-rangehuawei113:00to18:00working-day[RA-acl-adv-3001]rule0permitipsourceanydestinationanydestination-porteqwwwtime-rangehuawei[RA]firewallenable[RA]aclnumber3001[RA-acl-adv-3001]rule

4、0permit80sourceanydestinationanytime-rangehuawei[RA-acl-adv-3001]rule1permit80sourceanydestinationanytime-rangehuawei1[RA-acl-adv-3001]rule5denyipsourceanydestinationany[RA-acl-adv-3001]rule6denyipsourceanydestinationany[RA-acl-adv-3001]quit[RA]intg0/0[RA-GigabitEthernet0/0]firewa

5、llpacket-filter3001inbound[RA-acl-adv-3001]rule0permitospf[RA-acl-adv-3001]rule1permittcpdestination-porteqwww[RA-acl-adv-3001]rule5denyipsourceanydestinationanytime-rangehuawei[RA-acl-adv-3001]rule6denyipsourceanydestinationanytime-rangehuawei1[RA-acl-adv-3001]rule7permitipsource

6、anydestinationany[RA-acl-adv-3001]quit[RA-GigabitEthernet0/0]firewallpacket-filter3001inbound[RA-GigabitEthernet0/0]quit[RA]firewallenable10.1.2  PC作为lac拨入lns路由器sysnameLNS#l2tpenable                                       /使能l2tp/#domainsystemippool110.0.0.20010.0.0.240            

7、   /分配给拨号用户的地址/#local-userusera                                   /创建用于验证用户的本地帐号/passwordsimpleuseraservice-typeppp#interfaceVirtual-Template0pppauthentication-modepap              /PPP认证方式为PAP，使用system默认域/ipaddress10.0.0.193255.255.255.192remoteaddresspool1                    /指定

8、使用ippool1给用户分配地址/l2tp-group1manda