H3C ERG2 双WAN口怎样设置WAN1访问外网，WAN2访问内网服务器。

策略路由和虚拟服务器就可以 实现：

默认路由去外网，静态路由去服务器

上网就用默认路由

访问内网就用明细路由

1. 配置双 WAN 基础设置
[H3C] system-view
[H3C] interface GigabitEthernet 0/0/1 # WAN1(电信)
[H3C-GigabitEthernet0/0/1] ip address 202.100.1.10 255.255.255.0 # 设置WAN1 IP
[H3C-GigabitEthernet0/0/1] quit
[H3C] interface GigabitEthernet 0/0/2 # WAN2(内网服务器)
[H3C-GigabitEthernet0/0/2] ip address 192.168.200.1 255.255.255.0 # 设置WAN2 IP
[H3C-GigabitEthernet0/0/2] quit
[H3C] ip route-static 0.0.0.0 0.0.0.0 202.100.1.1 # 默认路由走WAN1
2. 配置策略路由（关键步骤）
基于目的 IP 的策略路由
[H3C] acl number 3000 # 创建高级ACL
[H3C-acl-adv-3000] rule 0 permit ip destination 192.168.100.0 0.0.0.255 # 匹配内网服务器网段
[H3C-acl-adv-3000] rule 1 permit ip destination 192.168.101.0 0.0.0.255 # 如需匹配多个网段，继续添加
[H3C-acl-adv-3000] quit
[H3C] policy-based-route PBR permit node 10 # 创建策略路由
[H3C-pbr-PBR-10] if-match acl 3000 # 匹配ACL 3000
[H3C-pbr-PBR-10] apply output-interface GigabitEthernet 0/0/2 # 指定走WAN2口
[H3C-pbr-PBR-10] quit
[H3C] interface GigabitEthernet 0/0/0 # 内网接口
[H3C-GigabitEthernet0/0/0] ip address 192.168.1.1 255.255.255.0 # 设置内网IP
[H3C-GigabitEthernet0/0/0] ip policy-based-route PBR # 在接口上应用策略路由
[H3C-GigabitEthernet0/0/0] quit