问

H3C MSR810

2023-10-21提问

0关注
0收藏，420浏览

神经蛙

神经蛙二段

粉丝：0人关注：0人

问题描述：

MSR810路由器,LAN设置Vlan-interface1 ,vlan1,地址是192.168.3.1,掩码255.255.255.0

后端192.168.3.2是一台IPPBX设备,通过路由器将UDP请求NAT到这台机器.但外部提SIP请求,却提示:Server Internal Error(500)

路由配置如下:

#
version 7.1.064, Release 0821P18
sysname H3C
clock timezone Beijing add 08:00:00
clock protocol ntp
#
wlan global-configuration
#
telnet server acl 2185
#
security-zone intra-zone default permit
#
port-mapping application sip port 5060 protocol UDP
#
dialer-group 89 rule ip permit
#
ip load-sharing mode per-flow src-ip global
#
dhcp enable
dhcp server always-broadcast
#
dns proxy enable
#
system-working-mode standard
password-recovery enable
#
vlan 1
#
dhcp server ip-pool lan1
gateway-list 192.168.3.1
network 192.168.3.0 mask 255.255.255.0
address range 192.168.3.1 192.168.3.254
dns-list 192.168.3.1
forbidden-ip-range 192.168.3.1 192.168.3.2
forbidden-ip-range 192.168.3.6 192.168.3.6
forbidden-ip-range 192.168.3.10 192.168.3.10
forbidden-ip-range 192.168.3.14 192.168.3.14
#
apn-profile profile69
apn dynamic
#
controller Cellular0/0
#
controller Cellular1/0
#
interface Dialer0
#
interface Dialer1
#
interface Dialer2
#
interface Dialer3
#
interface Dialer4
#
interface Dialer5
#
interface Dialer6
#
interface Dialer7
#
interface Dialer8
#
interface Dialer1023
#
interface Vlan-interface1
description LAN-interface
ip address 192.168.3.1 255.255.255.0
tcp mss 1280
#
interface GigabitEthernet0/0
port link-mode route
description Single_Line1
ip address x.x.x.x 255.255.255.0
tcp mss 1280
nat outbound
nat server protocol udp global current-interface 5060 inside 192.168.3.2 5060 reversible
nat server protocol udp global current-interface 10000 19999 inside 192.168.3.2 10000 19999
nat server protocol udp global current-interface 20000 29999 inside 192.168.3.2 20000 29999
nat server protocol udp global current-interface 30000 39999 inside 192.168.3.2 30000 39999
nat server protocol udp global current-interface 40000 50000 inside 192.168.3.2 40000 50000
#
interface GigabitEthernet0/5
port link-mode route
#
interface GigabitEthernet0/1
port link-mode bridge
port link-type trunk
port trunk permit vlan 1
#
interface GigabitEthernet0/2
port link-mode bridge
port link-type trunk
port trunk permit vlan 1
#
interface GigabitEthernet0/3
port link-mode bridge
port link-type trunk
port trunk permit vlan 1
#
interface GigabitEthernet0/4
port link-mode bridge
port link-type trunk
port trunk permit vlan 1
#
interface WLAN-Radio0/0
#
security-zone name Local
#
security-zone name Trust
#
security-zone name DMZ
#
security-zone name Untrust
#
security-zone name Management
#
scheduler logfile size 16
#
line class console
user-role network-admin
#
line class tty
user-role network-operator
#
line class usb
user-role network-admin
#
line class vty
user-role network-operator
#
line con 0
user-role network-admin
#
line vty 0 63
authentication-mode scheme
user-role network-operator
#
ip route-static 0.0.0.0 0 112.5.14.1
ip route-static 192.168.3.0 24 192.168.3.1 preference 50 description VLAN1
#
info-center loghost 127.0.0.1 port 3301
info-center source CFGLOG loghost level informational
#
performance-management
#
ssh server enable
#
acl basic 2185
rule 1 permit source object-group _web_manageTelnet_group_
#
acl basic name web_manageHttp_acl
rule 0 permit source object-group _web_manageHttp_group_
rule 65534 deny
#
domain system
#
domain default enable system
#
http method get head post put delete options
#
url-filter category custom severity 65535
#
return