关于内网转化IP到专线外网问题

您好，就是设置nat

这种模式一般2种方式：

1、专线接入交换机场景，单独划分VLAN，这个VLAN内配置这个地址，电脑只能上这个专线

2、接入防火墙场景，先明西路由指向这个接口和下一跳，在配置基于这个接口地址的NAT

IP和接口根据自己实际情况改写把

vlan 1
#
interface Vlan-interface1
ip address 192.168.30.1 255.255.255.0
#
interface GigabitEthernet1/0/2
port link-mode route
ip address 172.1.1.2 255.255.255.0

nat out
#
security-zone name Trust
import interface Vlan-interface1
import interface GigabitEthernet1/0/1 vlan 1 to 4094
#
security-zone name DMZ
#
security-zone name Untrust
import interface GigabitEthernet1/0/2
#
ip route-static 0.0.0.0 0 172.1.1.254
#
security-policy ip
rule 0 name u-t
action pass
logging enable
counting enable
profile 0_IPv4
source-zone Untrust
destination-zone Trust
rule 1 name t-u
action pass
logging enable
counting enable
profile 1_IPv4
source-zone Trust
destination-zone Untrust
rule 2 name t-l
action pass
source-zone Trust
destination-zone Local
rule 3 name l-t
action pass
source-zone Local
destination-zone Trust
rule 4 name u-l
action pass
logging enable
counting enable
source-zone Untrust
destination-zone Local
rule 5 name l-u
action pass
source-zone Local
destination-zone Untrust
rule 10 name t-t
action pass
disable
logging enable
counting enable
source-zone Trust
destination-zone Untrust