路由器nat的配置

login as: htxx ┌────────────────────────────────────────────────────────────────────┐ │ ? MobaXterm 20.0 ? │ │ (SSH client, X-server and networking tools) │ │ │ │ ? SSH session to htxx@192.168.200.2 │ │ ? SSH compression : ? │ │ ? SSH-browser : ? (disabled for Cisco compatibility) │ │ ? X11-forwarding : ? (disabled for Cisco compatibility) │ │ ? DISPLAY : 192.168.0.221:1.0 │ │ │ │ ? For more info, ctrl+click on help or visit our website │ └────────────────────────────────────────────────────────────────────┘ Last successfully login time: Tue Jan 23 16:02:49 2024 ****************************************************************************** * Copyright (c) 2004-2019 New H3C Technologies Co., Ltd. All rights reserved.* * Without the owner's prior written consent, * * no decompiling or reverse-engineering shall be allowed. * ****************************************************************************** <A8-28 H3C MSR3620> <A8-28 H3C MSR3620> <A8-28 H3C MSR3620>dis cu # version 7.1.064, Release 0707P15 # sysname A8-28 H3C MSR3620 # port-security enable # track 1 nqa entry yidong 10.151.1.5 reaction 1 # track 2 nqa entry guangdian 10.17.20.254 reaction 1 # ip ttl-expires enable # nat address-group 0 address 10.63.64.62 10.63.64.62 # nat address-group 1 address 11.40.46.73 11.40.46.78 # nat address-group 2 address 215.29.0.21 215.29.0.21 # dhcp enable dhcp server always-broadcast # dns proxy enable # lldp global enable # password-recovery enable # vlan 1 # dhcp server ip-pool GigabitEthernet0/1 # nqa entry butong 1.1.1.2 type icmp-echo destination ip 1.1.1.2 frequency 100 reaction 1 checked-element probe-fail threshold-type consecutive 5 action-type trigger-only # nqa entry guangdian 10.17.20.254 type icmp-echo destination ip 10.17.20.254 frequency 100 reaction 1 checked-element probe-fail threshold-type consecutive 5 action-type trigger-only # nqa entry yidong 10.151.1.5 type icmp-echo destination ip 10.151.1.5 frequency 100 reaction 1 checked-element probe-fail threshold-type consecutive 5 action-type trigger-only # nqa schedule butong 1.1.1.2 start-time now lifetime forever nqa schedule guangdian 10.17.20.254 start-time now lifetime forever nqa schedule yidong 10.151.1.5 start-time now lifetime forever # controller Cellular0/0 # interface Virtual-Template0 # interface NULL0 # interface GigabitEthernet0/0 port link-mode route description to-yinglian-银联 combo enable copper ip address 11.40.145.18 255.255.255.128 nat outbound 3001 address-group 1 # interface GigabitEthernet0/1 port link-mode route description 20191230 yidong combo enable copper ip address 215.89.0.22 255.255.255.252 nat outbound 3000 address-group 2 nat server protocol tcp global 215.29.0.21 8095 inside 192.168.1.144 8099 # interface GigabitEthernet0/2 port link-mode route description 2019.11.26 guangdian combo enable copper ip address 10.17.20.2 255.255.255.0 nat outbound 3000 address-group 0 # interface GigabitEthernet0/3 port link-mode route combo enable copper ip address 192.168.200.2 255.255.255.0 # interface GigabitEthernet0/4 port link-mode route # interface GigabitEthernet0/5 port link-mode route # security-zone name Local # security-zone name Trust # security-zone name DMZ # security-zone name Untrust # security-zone name Management # scheduler logfile size 16 # line class console user-role network-admin # line class tty user-role network-operator # line class usb user-role network-admin # line class vty user-role network-operator # line con 0 user-role network-admin # line vty 0 4 authentication-mode scheme user-role level-15 user-role network-operator set authentication password hash $h$6$5whgw1bFbogJjkGl$Mt7aPlPk1cMYUz649fjKvPQxNgx8JIuhWA9BcuGj8yNJkRnjj0ZwvApmnMLldmy4rwBd7ylscMiir4eJL+H23g== idle-timeout 5 0 # line vty 5 15 authentication-mode scheme user-role level-15 user-role network-operator set authentication password hash $h$6$5whgw1bFbogJjkGl$Mt7aPlPk1cMYUz649fjKvPQxNgx8JIuhWA9BcuGj8yNJkRnjj0ZwvApmnMLldmy4rwBd7ylscMiir4eJL+H23g== idle-timeout 35791 0 # line vty 16 63 authentication-mode none user-role level-15 user-role network-operator idle-timeout 5 0 # ip route-static 10.10.10.0 24 192.168.200.254 ip route-static 10.62.0.0 16 10.17.20.254 track 2 preference 88 description 20191126 guangdian ip route-static 10.62.0.0 16 10.151.1.5 track 1 preference 99 description 20191230 yidong ip route-static 10.62.0.0 16 215.89.0.21 preference 77 ip route-static 10.63.0.0 16 10.17.20.254 track 2 preference 88 description 20191126 guangdian ip route-static 10.63.0.0 16 10.151.1.5 track 1 preference 99 description 20191230 yidong ip route-static 10.63.0.0 16 215.89.0.21 preference 77 ip route-static 10.75.25.0 24 10.17.20.254 track 2 preference 88 description 20210828 guangdian ip route-static 10.75.25.0 24 10.151.1.5 track 1 preference 99 description 20210828 yidong ip route-static 10.75.25.0 24 215.89.0.21 preference 77 ip route-static 10.75.26.0 24 10.17.20.254 track 2 preference 88 description 20210828 guangdian ip route-static 10.75.26.0 24 10.151.1.5 track 1 preference 99 description 20210828 yidong ip route-static 10.75.26.0 24 215.89.0.21 preference 77 ip route-static 10.75.27.0 24 10.17.20.254 track 2 preference 88 description 20210828 guangdian ip route-static 10.75.27.0 24 10.151.1.5 track 1 preference 99 description 20210828 yidong ip route-static 10.75.27.0 24 215.89.0.21 preference 77 ip route-static 10.75.28.0 24 10.17.20.254 track 2 preference 88 description 20210828 guangdian ip route-static 10.75.28.0 24 10.151.1.5 track 1 preference 99 description 20210828 yidong ip route-static 10.75.28.0 24 215.89.0.21 preference 77 ip route-static 10.75.29.0 24 10.17.20.254 track 2 preference 88 description 20210828 guangdian ip route-static 10.75.29.0 24 10.151.1.5 track 1 preference 99 description 20210828 yidong ip route-static 10.75.29.0 24 215.89.0.21 preference 77 ip route-static 10.87.0.0 16 10.17.20.254 track 2 preference 88 description 20210828 guangdian ip route-static 10.87.0.0 16 215.89.0.21 preference 77 ip route-static 10.172.0.0 24 10.17.20.254 track 2 preference 88 description gugan-20220108 guangdian ip route-static 10.172.0.0 24 10.151.1.5 track 1 preference 99 description gugan-20220108 yidong ip route-static 10.172.0.0 24 215.89.0.21 preference 77 ip route-static 10.175.0.0 16 192.168.200.254 ip route-static 10.249.64.0 21 10.17.20.254 track 2 preference 88 description EIP-20220108 guangdian ip route-static 10.249.64.0 21 10.151.1.5 track 1 preference 99 description EIP-20220108 yidong ip route-static 10.249.64.0 21 215.89.0.21 preference 77 ip route-static 10.249.72.0 21 10.17.20.254 track 2 preference 88 description NAT-20220108 guangdian ip route-static 10.249.72.0 21 10.151.1.5 track 1 preference 99 description NAT-20220108 yidong ip route-static 10.249.72.0 21 215.89.0.21 preference 77 ip route-static 10.249.80.0 21 10.17.20.254 track 2 preference 88 description SLB-20220108 guangdian ip route-static 10.249.80.0 21 10.151.1.5 track 1 preference 99 description SLB-20220108 yidong ip route-static 10.249.80.0 21 215.89.0.21 preference 77 ip route-static 10.249.96.0 20 10.17.20.254 track 2 preference 88 description SLB-20220108 guangdian ip route-static 10.249.96.0 20 10.151.1.5 track 1 preference 99 description SLB-20220108 yidong ip route-static 10.249.96.0 20 215.89.0.21 preference 77 ip route-static 10.249.112.0 21 10.17.20.254 track 2 preference 88 description SLB-20220108 guangdian ip route-static 10.249.112.0 21 10.151.1.5 track 1 preference 99 description SLB-20220108 yidong ip route-static 10.249.112.0 21 215.89.0.21 preference 7 ip route-static 11.40.0.0 16 11.40.145.1 ip route-static 112.130.0.0 24 10.151.1.5 track 1 preference 99 description 20210828 yidong ip route-static 112.130.0.0 24 10.17.20.254 track 2 preference 88 description 20210828 guangdian ip route-static 112.130.0.0 24 215.89.0.21 preference 77 ip route-static 119.10.10.0 24 10.151.1.5 track 1 preference 99 description 20210828 yidong ip route-static 119.10.10.0 24 10.17.20.254 track 2 preference 88 description 20210828 guangdian ip route-static 119.10.10.0 24 215.89.0.21 preference 77 ip route-static 119.10.100.0 24 10.151.1.5 track 1 preference 99 description 20210828 yidong ip route-static 119.10.100.0 24 10.17.20.254 track 2 preference 88 description 20210828 guangdian ip route-static 119.10.100.0 24 215.89.0.21 preference 77 ip route-static 172.16.68.0 24 10.151.1.5 track 1 preference 99 description 20210828 yidong ip route-static 172.16.68.0 24 10.17.20.254 track 2 preference 88 description 20210828 guangdian ip route-static 172.16.68.0 24 215.89.0.21 preference 77 ip route-static 172.16.96.0 24 10.151.1.5 track 1 preference 99 description 20210828 yidong ip route-static 172.16.96.0 24 10.17.20.254 track 2 preference 88 description 20210828 guangdian ip route-static 172.16.96.0 24 215.89.0.21 preference 77 ip route-static 172.23.30.0 24 10.17.20.254 track 2 preference 88 description 20210828 guangdian ip route-static 172.23.30.0 24 10.151.1.5 track 1 preference 99 description 20210828 yidong ip route-static 172.23.30.0 24 215.89.0.21 preference 77 ip route-static 172.23.31.0 24 10.17.20.254 track 2 preference 88 description 20210828 guangdian ip route-static 172.23.31.0 24 10.151.1.5 track 1 preference 99 description 20210828 yidong ip route-static 172.23.31.0 24 215.89.0.21 preference 77 ip route-static 172.23.32.0 24 10.17.20.254 track 2 preference 88 description 20210828 guangdian ip route-static 172.23.32.0 24 10.151.1.5 track 1 preference 99 description 20210828 yidong ip route-static 172.23.32.0 24 215.89.0.21 preference 77 ip route-static 172.23.33.0 24 10.17.20.254 track 2 preference 88 description 20210828 guangdian ip route-static 172.23.33.0 24 10.151.1.5 track 1 preference 99 description 20210828 yidong ip route-static 172.23.33.0 24 215.89.0.21 preference 77 ip route-static 172.23.34.0 24 10.17.20.254 track 2 preference 88 description 20210828 guangdian ip route-static 172.23.34.0 24 10.151.1.5 track 1 preference 99 description 20210828 yidong ip route-static 172.23.34.0 24 215.89.0.21 preference 77 ip route-static 172.23.35.0 24 10.17.20.254 track 2 preference 88 description 20191126 guangdian ip route-static 172.23.35.0 24 10.151.1.5 track 1 preference 99 description 20191230 yidong ip route-static 172.23.35.0 24 215.89.0.21 preference 77 ip route-static 172.23.36.0 24 10.17.20.254 track 2 preference 88 description 20191126 guangdian ip route-static 172.23.36.0 24 10.151.1.5 track 1 preference 99 description 20191230 yidong ip route-static 172.23.36.0 24 215.89.0.21 preference 77 ip route-static 172.23.89.128 26 10.17.20.254 track 2 preference 88 description guangdian ip route-static 172.23.89.128 26 10.151.1.5 track 1 preference 99 description 20201223 yidong ip route-static 172.23.89.128 26 215.89.0.21 preference 77 ip route-static 192.168.0.0 16 192.168.200.254 ip route-static 193.0.0.0 8 192.168.200.254 description canganyuanqu ip route-static 215.251.0.0 16 215.89.0.21 preference 77 ip route-static 215.255.0.0 16 215.89.0.21 preference 77 # info-center security-logfile enable info-center loghost 10.10.10.118 # snmp-agent snmp-agent local-engineid 800063A28080E455D133F400000001 snmp-agent community read slyy snmp-agent sys-info version all # ssh server enable # acl advanced 3000 description 2019.11.26.guangdian rule 5 deny udp destination-port eq dns rule 6 deny tcp destination-port eq dns rule 50 permit ip source 192.168.0.0 0.0.255.255 rule 51 permit ip source 193.168.0.0 0.0.255.255 # acl advanced 3001 rule 5 deny tcp destination-port eq 445 rule 6 deny udp destination-port eq dns rule 7 deny tcp destination-port eq dns rule 15 permit ip destination 11.40.0.0 0.0.255.255 # acl advanced 3002 # password-control enable undo password-control aging enable undo password-control history enable password-control length 6 password-control login-attempt 3 exceed lock-time 10 password-control update-interval 0 password-control login idle-time 0 password-control complexity user-name check # domain system # domain default enable system # role name level-0 description Predefined level-0 role # role name level-1 description Predefined level-1 role # role name level-2 description Predefined level-2 role # role name level-3 description Predefined level-3 role # role name level-4 description Predefined level-4 role # role name level-5 description Predefined level-5 role # role name level-6 description Predefined level-6 role # role name level-7 description Predefined level-7 role # role name level-8 description Predefined level-8 role # role name level-9 description Predefined level-9 role # role name level-10 description Predefined level-10 role # role name level-11 description Predefined level-11 role # role name level-12 description Predefined level-12 role # role name level-13 description Predefined level-13 role # role name level-14 description Predefined level-14 role # user-group system # local-user 15068508125 class manage service-type ssh telnet terminal https authorization-attribute user-role level-15 authorization-attribute user-role network-operator # local-user admin class manage access-limit 16 service-type ssh telnet terminal http https authorization-attribute user-role network-admin # local-user admincz class manage service-type ssh telnet terminal https authorization-attribute user-role level-10 authorization-attribute user-role network-operator # local-user adminsj class manage service-type ssh telnet terminal https authorization-attribute user-role level-5 authorization-attribute user-role network-operator # local-user adminsxswsj class manage service-type ssh telnet terminal https authorization-attribute user-role level-5 authorization-attribute user-role network-operator # local-user htxx class manage service-type ssh telnet terminal http https authorization-attribute user-role level-15 authorization-attribute user-role network-operator # local-user slyy class manage service-type ssh telnet terminal http https authorization-attribute user-role level-15 authorization-attribute user-role network-operator # local-user sxey class manage service-type ssh telnet terminal http https authorization-attribute user-role level-15 authorization-attribute user-role network-operator # local-user sxfb class manage service-type ssh telnet terminal http https authorization-attribute user-role level-15 authorization-attribute user-role network-operator # local-user szwsj class manage service-type ssh telnet terminal http https authorization-attribute user-role level-15 authorization-attribute user-role network-operator # ip https enable # wlan global-configuration # wlan ap-group default-group vlan 1 # return <A8-28 H3C MSR3620>