hc3路由器

路由设置好了，可以上网了  但是nat外网不能访问

大神们帮忙看看，哪里错了。谢谢！

[H3C]dis cu

#

 version 7.1.064, Release 0615P13

#

 sysname H3C

#

 dhcp enable

 dhcp server always-broadcast

#

 dns proxy enable

#

 password-recovery enable

#

vlan 1

#

dhcp server ip-pool GigabitEthernet0/1

 gateway-list 172.10.10.254

 network 172.10.10.0 mask 255.255.255.0

 address range 172.10.10.10 172.10.10.250

 dns-list 202.103.24.68 114.114.114.114

#

dhcp server ip-pool lan1

 gateway-list 192.168.0.1

 network 192.168.0.0 mask 255.255.254.0

 address range 192.168.1.2 192.168.1.254

 dns-list 192.168.0.1

#              

controller Cellular0/0

#              

controller Cellular0/1

#              

interface Aux0 

#              

interface NULL0

#              

interface GigabitEthernet0/0

 port link-mode route

 combo enable copper

 ip address 192.168.0.1 255.255.254.0

 tcp mss 1280  

#              

interface GigabitEthernet0/1

 port link-mode route

 ip address 172.10.10.254 255.255.255.0

#              

interface GigabitEthernet0/2

 port link-mode route

 description Multiple_Line

 ip address 61.184.0.0 255.255.255.240

 dns server 202.103.24.68

 nat outbound  

 nat server protocol tcp global 61.184.0.0 554 inside 172.10.10.253 554

 nat server protocol tcp global 61.184.0.0 655 inside 172.10.10.253 655

 nat server protocol tcp global 61.184.0.0 1443 inside 172.10.10.253 1443

 nat server protocol tcp global 61.184.0.0 6200 inside 172.10.10.253 6200

 nat server protocol tcp global 61.184.0.0 6202 inside 172.10.10.253 6202

 nat server protocol tcp global 61.184.0.0 6204 inside 172.10.10.253 6204

 nat server protocol tcp global 61.184.0.0 6304 inside 172.10.10.253 6304

 nat server protocol tcp global 61.184.0.0 7024 inside 172.10.10.253 7024

 nat server protocol tcp global 61.184.0.0 7033 inside 172.10.10.253 7033

 nat server protocol tcp global 61.184.0.0 7040 7090 inside 172.10.10.253 7040 7090

 nat server protocol tcp global 61.184.0.0 7091 inside 172.10.10.253 7091

 nat server protocol tcp global 61.184.0.0 7092 7097 inside 172.10.10.253 7092 7097

 nat server protocol tcp global 61.184.0.0 7301 inside 172.10.10.253 7301

 nat server protocol tcp global 61.184.0.0 7302 inside 172.10.10.253 7302

 nat server protocol tcp global 61.184.0.0 7660 inside 172.10.10.253 7660

 nat server protocol tcp global 61.184.0.0 8338 inside 172.10.10.253 8338

 nat server protocol tcp global 61.184.0.0 8508 inside 172.10.10.253 8508

 nat server protocol tcp global 61.184.0.0 9000 inside 172.10.10.253 9000

 nat server protocol tcp global 61.184.0.0 9100 inside 172.10.10.253 9100

 nat server protocol tcp global 61.184.0.0 9200 inside 172.10.10.253 9200

 nat server protocol tcp global 61.184.0.0 9308 inside 172.10.10.253 9308

 nat server protocol tcp global 61.184.0.0 9320 inside 172.10.10.253 9320

 nat server protocol tcp global 61.184.0.0 15000 16999 inside 172.10.10.253 15000 16999

 nat server protocol tcp global 61.184.0.0 17000 inside 172.10.10.253 17000

 nat server protocol tcp global 61.184.0.0 55555 inside 172.10.10.253 55555

 nat server protocol udp global 61.184.0.0 7040 7097 inside 172.10.10.253 7040 7097

 nat server protocol udp global 61.184.0.0 8338 inside 172.10.10.253 8338

 nat server protocol udp global 61.184.0.0 9000 inside 172.10.10.253 9000

 nat server protocol udp global 61.184.0.0 15000 16999 inside 172.10.10.253 15000 16999

#              

 scheduler logfile size 16

#              

line class aux 

 user-role network-admin

#              

line class tty 

 user-role network-operator

#              

line class vty 

 user-role network-operator

#              

line aux 0     

 user-role network-admin

#              

line vty 0 63  

 authentication-mode scheme

 user-role network-operator

#              

 ip route-static 0.0.0.0 0 GigabitEthernet0/2 61.184.85.17

#              

 password-control enable 

 undo password-control aging enable 

 undo password-control history enable 

 password-control length 6

 password-control login-attempt 3 exceed lock-time 10

 password-control update-interval 0

 password-control login idle-time 0

 password-control complexity user-name check

#              

domain system  

#              

 domain default enable system

#              

role name level-0

 description Predefined level-0 role

#              

role name level-1

 description Predefined level-1 role

#              

role name level-2

 description Predefined level-2 role

#              

role name level-3

 description Predefined level-3 role

#              

role name level-4

 description Predefined level-4 role

#              

role name level-5

 description Predefined level-5 role

#              

role name level-6

 description Predefined level-6 role

#              

role name level-7

 description Predefined level-7 role

#              

role name level-8

 description Predefined level-8 role

#              

role name level-9

 description Predefined level-9 role

#              

role name level-10

 description Predefined level-10 role

#              

role name level-11

 description Predefined level-11 role

#              

role name level-12

 description Predefined level-12 role

#              

role name level-13

 description Predefined level-13 role

#              

role name level-14

 description Predefined level-14 role

#              

user-group system

#              

local-user admin class manage

 service-type telnet http

 authorization-attribute user-role network-admin

#              

 ip http enable

#              

wlan global-configuration

#              

wlan ap-group default-group

#              

return         

[H3C]