acg1000 批量映射端口,怎么设置1对1

!config
authorized-table admin
    description Default authority table with all authority enable
    authorized read all
    authorized write all
!
authorized-table audit
    description Default authority table used for audit administrator
    authorized read all
!
user administrator admin local secret On662dC0lIPJ3uuygOv9HgemSDdRlzNMiXjyCXV7Im7jaQojPr0dkmndXqIui2U authorized-table admin 
user administrator admin authorized-address first 0.0.0.0/0
radius nas-port-type ethernet
!
app-ident mode smart
timezone 57
ntp ***.*** 10080
!
pki ca crl update-period 30
!
!
interface ge0
 ip address 192.168.10.2/24
 allow access https
 allow access ping
 allow access telnet
!
interface ge1
!
interface ge2
!
interface ge3
!
interface ge4
!
interface ge5
!
interface ge6
!
interface ge7
!
interface ge8
!
interface ge9
!
interface ge10
!
interface ge11
!
interface ge12
!
interface ge13
!
interface ge14
!
interface ge15
!
interface ge16
!
interface ge17
!
interface ge18
 traffic-mode extern
 ip address 60.6.221.10/26
 allow access https
 allow access ping
 allow access telnet
!
interface ge19
 ip address 192.168.90.254/24
 allow access https
 allow access http
 allow access ping
 allow access telnet
!
!address
!
address lczx
 ip address 60.6.221.10
!
address 实验楼
 ip subnet 192.168.10.0/24
!
address 办公楼
 ip subnet 192.168.50.0/24
!
address 服务器
 ip subnet 192.168.20.0/24
!
address 北教学楼
 ip subnet 192.168.30.0/24
!
address 南教学楼
 ip subnet 192.168.40.0/24
!
address 图书馆
 ip subnet 192.168.60.0/24
!
address 阅卷专线
 ip subnet 192.168.51.0/24
!
address 高考专线
 ip subnet 192.168.52.0/24
!
address master
 ip address 192.168.10.160
!
!address6
!
!address-group
!
!service
!
service 阅卷
 tcp dst-port 81 81 src-port 0 65535
!
service 高考监控
 tcp dst-port 30000 30000 src-port 0 65535
 tcp dst-port 9901 9901 src-port 0 65535
 tcp dst-port 9833 9833 src-port 0 65535
 tcp dst-port 9902 9902 src-port 0 65535
 udp dst-port 30000 30000 src-port 0 65535
 udp dst-port 9901 9901 src-port 0 65535
 udp dst-port 3389 3389 src-port 0 65535
 udp dst-port 9833 9833 src-port 0 65535
!
service 家校互联
 tcp dst-port 9001 9005 src-port 9001 9005
 tcp dst-port 8132 8136 src-port 8132 8136
 tcp dst-port 8132 8132 src-port 8132 8132
!
!service-group
!
!schedule-day
!
!schedule-week
!
!schedule-month
!
!schedule-once
!
!user
!
!user-group
!
!
!user-policy
!
!zone
!
application-group p2p
 member application BitTorrent
 member application 100Bao
 member application eMule
 member application Kademlia_Protocol
 member application eD2k_Protocol
 member application Kamun
 member application POCO
 member application Kazaa
 member application Maze
 member application Thunder
!
!
!
!
!track
!
!
!track-group
!
!
!
policy any any any any any any any always audit 1
 app-policy 1 category Online_Game any any keyword include any deny info FilterIMLoginAction 
  app-policy enable 1
 app-policy 2 category IM_Software any any keyword include any accept info FilterIMLoginAction 
  app-policy enable 2
 app-policy 3 group p2p any any keyword include any deny info FilterIMLoginAction 
  app-policy enable 3
 app-policy 4 category Search_Engine any any keyword include any accept info FilterIMLoginAction 
  app-policy enable 4
 app-policy 5 application any any any keyword include any accept info FilterIMLoginAction 
  app-policy enable 5
 website-policy malware disable
 website-policy 1 lottery,drug,transaction,gambling,trade,political,porn accept info FilterUrl 
  website-policy enable 1
policy default-action permit
policy white-list enable
!
snmp
 community secret 6NSjZ2FJfHqUtCqRXdechDETsW7nP4FFcq1ujxx1HotuCZoZGsn14R7gwFVplw1
 write-community secret QuVJ8MPv5S7noa5Lp+C7xY4UnIZD5gm5LCCvi9RLtC2fYqVZdaKQ0rdwLAIf36P
 syslocation Hangzhou, China
 syscontact New H3C Tech. Co., Ltd.
!
dhcp
!
!
!
ip route 0.0.0.0/0 60.6.221.1
ip route 192.168.10.0/24 192.168.90.1
ip route 192.168.11.0/24 192.168.90.1
ip route 192.168.20.0/24 192.168.90.1
ip route 192.168.30.0/24 192.168.90.1
ip route 192.168.40.0/24 192.168.90.1
ip route 192.168.50.0/24 192.168.90.1
ip route 192.168.51.0/24 192.168.90.1
ip route 192.168.52.0/24 192.168.90.1
ip route 192.168.60.0/24 192.168.90.1
ip route 192.168.70.0/24 192.168.90.1
ip route 192.168.80.0/24 192.168.90.1
!
!user-param
!
user-param recognition threshold 60000
!user-webauth
!
user-webauth traffic-alive
user-webauth portal-url default-template
!user-wechat
!
user-wechat portal-url default-template
!user-portal-server
!
user-portal-server mac-sensitive enable
!user-imc
!
!user-app-server
!
!user-sms-server
!
user-sms portal-url default-template
!user-free-server
!
user-free portal-url default-template
!ip session limit
!
dns server 202.99.166.4 202.99.160.68 
!
ip nat pool FTP-Server
 ip address 192.168.20.2 192.168.20.2
ip nat pool 阅卷服务器
 ip address 192.168.51.2 192.168.51.2
ip nat pool 高考三合一服务器
 ip address 192.168.52.8 192.168.52.8
ip nat pool 家校互联
 ip address 192.168.50.201 192.168.50.201
!
ip nat source ge18 any any any interface 1
!
ip nat destination ge18 any lczx ftp FTP-Server service 21 2
ip nat destination ge18 any lczx 阅卷 阅卷服务器 service 80 log 1
ip nat destination ge18 any lczx 高考监控 高考三合一服务器 service 30000 log 3
ip nat destination ge18 any lczx 高考监控 高考三合一服务器 service 9901 log 4
ip nat destination ge18 any lczx 高考监控 高考三合一服务器 service 3389 log 5
ip nat destination ge18 any lczx 高考监控 高考三合一服务器 service 9833 log 6
ip nat destination ge18 any lczx 高考监控 高考三合一服务器 service 9938 7
ip nat destination ge18 any lczx 高考监控 高考三合一服务器 service 9902 8
ip nat destination ge18 any lczx 家校互联 家校互联 service 8132 9
ip nat destination ge18 any lczx 家校互联 家校互联 service 8133 10
ip nat destination ge18 any lczx 家校互联 家校互联 service 8134 11
ip nat destination ge18 any lczx 家校互联 家校互联 service 8135 12
ip nat destination ge18 any lczx 家校互联 家校互联 service 8136 13
ip nat destination ge18 any lczx 家校互联 家校互联 service 9001 14
ip nat destination ge18 any lczx 家校互联 家校互联 service 9002 15
ip nat destination ge18 any lczx 家校互联 家校互联 service 9003 16
ip nat destination ge18 any lczx 家校互联 家校互联 service 9004 17
ip nat destination ge18 any lczx 家校互联 家校互联 service 9005 18
!
!
!
!
proute rematch enable
!
ip defend attack ping-of-death
ip defend attack tear-drop
ip defend attack jolt2
ip defend attack land-base
ip defend attack winnuke
ip defend attack tcp-flag
ip defend attack smurf
ip defend attack ip-option
ip defend attack ip-spoof
!
!flow-account
!
set dplog time disable
set dplog send time 23
!interface track
!
!
user-share check enable
user-share deny disable
user-share log switch off
user-share freeze hide tips %E6%82%A8%E5%9B%A0%E4%B8%BA%E5%85%B1%E4%BA%AB%E7%BB%88%E7%AB%AF%E8%A2%AB%E7%A6%81%E6%AD%A2%E8%AE%BF%E9%97%AE%E7%BD%91%E7%BB%9C%EF%BC%81%E5%86%BB%E7%BB%93%E6%97%B6%E9%97%B4%3Cfrozen-time%3E%EF%BC%8C%E5%88%86%E4%BA%AB%E7%BB%88%E7%AB%AF%3Cterminal-number%3E%E4%B8%AA
!service-quality
!
!
snmp mac-learn disable
snmp mac-learn updatetimes 30
auto-update
 update enable
 monthly 1
 time hour 23 minute 0
qos-profile line 网通
 limit both
 maxbandwidth ingress 100000
 maxbandwidth egress 10000
 match interface ge18
!
qos-profile channel def_网通 parent 网通
 bandwidth ingress 20000
 maxbandwidth ingress 100000
 bandwidth egress 10000
 maxbandwidth egress 10000
 priority high
!
policy6 default-action permit
!

ha-config

!end