华为nat配置实例

《华为nat配置实例》由会员上传分享，免费在线阅读，更多相关内容在工程资料-天天文库。

1、窗体顶端NAT【Router】当前路由器提示视图依次输入的配置命令，重要的命令红色突出显示简单说明[Quidway]aclnumber2000[Quidway-acl-basic-2000]rulepermitsource10.124.187.00.0.0.255配置允许进行NAT转换的内网地址段[Quidway-acl-basic-2000]ruledeny[Quidway]interfaceEthernet0/1[Quidway-Ethernet0/1]ipaddress10.124.187.1255.0.0.0内网网关[Quidway]interfaceEthernet0/0[Qu

2、idway-Ethernet0/1]ipaddress10.124.1.1255.255.255.248[Quidway-Ethernet0/1]natoutbound2000在出接口上进行NAT转换[Quidway]iproute-static0.0.0.00.0.0.0101.1.1.1preference60配置默认路由华为路由器单臂路由配置实例组网描述:PC---------------------3050C-------------------------AR28-31-------------------------INTERNET组网实现:3050C上划分多个VLAN,在A

3、R28-31上终结VLAN信息,下面的所有VLAN中的PC都可以上公网,所有的PC机都通过AR28-31分配IP地址和DNS[AR28-31]discu#sysnameQuidway#FTPserverenable#nataddress-group0222.222.222.2222.222.222.10    用于上公网的地址池#radiusschemesystem#domainsystem#local-useradminpasswordcipher.]@USE=B,53Q=^Q`MAF4<1!!service-typetelnetterminallevel3service-typeft

4、plocal-userhuawei                                    telnet用户,用于远程管理passwordsimplehuaweiservice-typetelnetlevel3#dhcpserverip-pool10                              为VLAN10分配IP地址network192.168.10.0mask255.255.255.0gateway-list192.168.10.1dns-list100.100.100.100#dhcpserverip-pool20                   

5、           为VLAN20分配IP地址network192.168.20.0mask255.255.255.0gateway-list192.168.20.1dns-list100.100.100.100#dhcpserverip-pool30                              为VLAN30分配IP地址network192.168.30.0mask255.255.255.0gateway-list192.168.30.1dns-list100.100.100.100#dhcpserverip-pool40                        

6、      为VLAN40分配IP地址network192.168.40.0mask255.255.255.0gateway-list192.168.40.1dns-list100.100.100.100#interfaceAux0asyncmodeflow#interfaceEthernet1/0                              用于与交换机的管理IP互通ipaddress192.168.100.1255.255.255.0firewallpacket-filter3000inbound#interfaceEthernet1/0.1              

7、              终结交换机上的VLAN10tcpmss1024ipaddress192.168.10.1255.255.255.0firewallpacket-filter3000inboundvlan-typedot1qvid10#interfaceEthernet1/0.2                            终结交换机上的VLAN20tcpmss1024ipaddress192.168.20.12