SR88设备SPC板引流配置

无

# 配置IP地址池1，包括两个公网地址202.38.1.2和202.38.1.3。

<Router> system-view

[Router] nat address-group 1 202.38.1.2 202.38.1.3

# 配置访问控制列表2001，仅允许内部网络中10.110.10.0/24网段的用户可以访问Internet。

[Router] acl number 2001

[Router-acl-basic-2001] rule permit source 10.110.10.0 0.0.0.255

[Router-acl-basic-2001] rule deny

[Router-acl-basic-2001] quit

# 配置重定向报文的访问控制列表2002。由于本例中重定向到NAT业务接口的报文为需要地址转换的报文，因此ACL 2002中定义的ACL规则与ACL 2001相同，但也可以根据实际组网需求定义不同的规则。

[Router] acl number 2002

[Router-acl-basic-2002] rule permit source 10.110.10.0 0.255.255.255

[Router-acl-basic-2002] rule deny

[Router-acl-basic-2002] quit

# 配置QoS策略将报文重定向到NAT4/0/1。

[Router] traffic classifier 1

[Router-classifier-1] if-match acl 2002

[Router-classifier-1] quit

[Router] traffic behavior 1

[Router-behavior-1] redirect interface nat 4/0/1

[Router-behavior-1] quit

[Router] qos policy 1

[Router-qospolicy-1] classifier 1 behavior 1

[Router-qospolicy-1] quit

[Router] interface Gigabitethernet 3/0/1

[Router-GigabitEthernet3/0/1] qos apply policy 1 inbound

# 在出接口GigabitEthernet4/1/2上配置ACL2001与IP地址池1相关联。

[Router] interface Gigabitethernet 4/1/2

[Router-GigabitEthernet4/1/2] nat outbound 2001 address-group 1

[Router-GigabitEthernet4/1/2] quit

# 配置在NAT业务接口NAT4/0/1上绑定已经配置NAT功能的接口GigabitEthernet4/1/2。

[Router] interface nat 4/0/1

[Router-NAT4/0/1] nat binding interface Gigabitethernet 4/1/2

[Router-NAT4/0/1] quit