问

MSR 3600端口映射不通

2020-07-26提问

0关注
1收藏，1173浏览

zhiliao_PoLU3

zhiliao_PoLU3 零段

粉丝：0人关注：0人

问题描述：

MSR3600-51在web界面做映射后测试不通在内网telnet 内网地址的真实端口是通的本次只做了两个地址192.168.40.241；192.168.40.242原有是映射我也在外部测试也是不通的

组网及组网描述：

sys System View: return to User View with Ctrl+Z. [H3C-3600]dis cur # version 7.1.064, Release 0809P27 # sysname H3C-3600 # telnet server enable # dhcp enable dhcp server forbidden-ip 192.168.1.1 192.168.1.50 dhcp server forbidden-ip 192.168.2.1 192.168.2.50 dhcp server forbidden-ip 192.168.3.1 192.168.3.50 dhcp server forbidden-ip 192.168.40.200 192.168.40.254 # mirroring-group 1 local # password-recovery enable # vlan 1 # vlan 10 description 1-lou # vlan 20 description 2-lou # vlan 30 description 3-lou # vlan 40 description 4-lou # dhcp server ip-pool 30 # dhcp server ip-pool dhcpvlan10 gateway-list 192.168.1.1 network 192.168.1.0 mask 255.255.255.0 address range 192.168.1.51 192.168.1.254 dns-list 211.137.130.3 61.134.1.4 # dhcp server ip-pool dhcpvlan20 gateway-list 192.168.2.1 network 192.168.2.0 mask 255.255.255.0 address range 192.168.2.51 192.168.2.254 dns-list 211.137.130.3 61.134.1.4 # dhcp server ip-pool dhcpvlan30 gateway-list 192.168.3.1 network 192.168.3.0 mask 255.255.255.0 address range 192.168.3.51 192.168.3.254 dns-list 211.137.130.3 61.134.1.4 # dhcp server ip-pool dhcpvlan40 gateway-list 192.168.40.1 network 192.168.40.0 mask 255.255.255.0 address range 192.168.40.1 192.168.40.199 dns-list 211.137.130.3 61.134.1.4 # controller Cellular0/0 # interface Aux0 # interface NULL0 # interface Vlan-interface10 ip address 192.168.1.1 255.255.255.0 mirroring-group 1 mirroring-port both # interface Vlan-interface20 ip address 192.168.2.1 255.255.255.0 mirroring-group 1 mirroring-port both # interface Vlan-interface30 ip address 192.168.3.1 255.255.255.0 mirroring-group 1 mirroring-port both nat hairpin enable # interface Vlan-interface40 ip address 192.168.40.1 255.255.255.0 mirroring-group 1 mirroring-port both nat hairpin enable # interface GigabitEthernet0/0 port link-mode route ip address 192.168.254.2 255.255.255.252 # interface GigabitEthernet0/1 port link-mode route description Multiple_Line ip address 111.20.162.194 255.255.255.252 packet-filter 3002 inbound nat outbound nat outbound 2000 nat server protocol tcp global current-interface 8004 inside 192.168.3.21 80 nat server protocol tcp global current-interface 8011 inside 192.168.40.241 80 nat server protocol tcp global current-interface 8012 inside 192.168.40.241 155 4 nat server protocol tcp global current-interface 8013 inside 192.168.40.241 800 0 nat server protocol tcp global current-interface 8021 inside 192.168.40.242 80 nat server protocol tcp global current-interface 8022 inside 192.168.40.242 155 4 nat server protocol tcp global current-interface 8023 inside 192.168.40.242 800 0 nat server protocol tcp global current-interface 10001 inside 192.168.40.200 80 nat server protocol udp global current-interface 32768 inside 192.168.40.200 32 768 nat server protocol udp global current-interface 32770 inside 192.168.40.200 32 770 nat server protocol udp global current-interface 32771 inside 192.168.40.200 32 771 nat server protocol udp global current-interface 32773 inside 192.168.40.200 32 773 nat server protocol udp global current-interface 32774 inside 192.168.40.200 32 774 nat server protocol udp global current-interface 32775 inside 192.168.40.200 32 775 nat server protocol udp global current-interface 32776 inside 192.168.40.200 32 776 nat server protocol udp global current-interface 32777 inside 192.168.40.200 32 777 # interface GigabitEthernet0/2 port link-mode route ip address 1.85.1.162 255.255.255.252 nat outbound 2000 #

3 个回答

按时间按赞数

已采纳

zhiliao_mlw0U

zhiliao_mlw0U 九段

粉丝：19人关注：1人

是不是两个外网口，在两个外网口开启下ip last-hop hold

只有一个外网口。。我刚刚试了一下不行、、

zhiliao_PoLU3 发表时间：2020-07-26

检查下，服务器是否可以上外网，外网电脑到路由器是否可达，如果都测试过的话，就不知道了

zhiliao_mlw0U 发表时间：2020-07-26

外网电脑到路由器没问题。服务器这个没在机器旁边暂时测试不了路由器上看的话地址是在线的 192.168.40.241 64db-8b88-ed8b 40 GE0/18 15 D 192.168.40.242 64db-8b99-b6ba 40 GE0/18 1 D

zhiliao_PoLU3 发表时间：2020-07-26

到时候可以先检查下

zhiliao_mlw0U 发表时间：2020-07-26

zhiliao_PoLU3

zhiliao_PoLU3 知了小白

粉丝：0人关注：0人

怎么没有跳行，，，这个是映射部分的配置

interface GigabitEthernet0/1
port link-mode route
description Multiple_Line
ip address 111.20.162.194 255.255.255.252
packet-filter 3002 inbound
nat outbound
nat outbound 2000
nat server protocol tcp global current-interface 8004 inside 192.168.3.21 80
nat server protocol tcp global current-interface 8011 inside 192.168.40.241 80
nat server protocol tcp global current-interface 8012 inside 192.168.40.241 155
4
nat server protocol tcp global current-interface 8013 inside 192.168.40.241 800
0
nat server protocol tcp global current-interface 8021 inside 192.168.40.242 80
nat server protocol tcp global current-interface 8022 inside 192.168.40.242 155
4
nat server protocol tcp global current-interface 8023 inside 192.168.40.242 800
0
nat server protocol tcp global current-interface 10001 inside 192.168.40.200 80
nat server protocol udp global current-interface 32768 inside 192.168.40.200 32
768
nat server protocol udp global current-interface 32770 inside 192.168.40.200 32
770
nat server protocol udp global current-interface 32771 inside 192.168.40.200 32
771
nat server protocol udp global current-interface 32773 inside 192.168.40.200 32
773
nat server protocol udp global current-interface 32774 inside 192.168.40.200 32
774
nat server protocol udp global current-interface 32775 inside 192.168.40.200 32
775
nat server protocol udp global current-interface 32776 inside 192.168.40.200 32
776
nat server protocol udp global current-interface 32777 inside 192.168.40.200 32
777
#