资源描述:
《1台服务器做双出口nat server的配置》由会员上传分享,免费在线阅读,更多相关内容在行业资料-天天文库。
1、这里使用的AR46-20做的实验,所有中低端路由器都可以这样做。1台服务器做双出口NATserver的配置192.168.0.2/24192.168.1.2/24E1/0/0192.168.0.1/24192.168.1.1/2410.0.0.1/2410.0.0.2/24E0/0/020.0.0.1/24E0/0/120.0.0.2/24200.1.1.1/24AR46-20100.1.1.1/24NAT转换图•用户的server只有一块网卡,要求在AR46-20上e0/0/0接口连接网通,e0/0/1接口连接电信,在两个接口上都要做natserver指向内网的服务器。•要实现用户的需求
2、必须要保证在e0/0/0接口进入的访问服务器的外网报文要能从e0/0/0口返回给外网,在e0/0/1接口进入的访问服务器的外网报文要能从e0/0/1口返回给外网。所以在服务器的一块网卡上要配置两个ip地址,在路由器连接服务器的接口上必须要配置策略路由才能实现。具体的配置信息如下:disverCopyrightNotice:Allrightsreserved(Aug172005).Withouttheowner'spriorwrittenconsent,nodecompilingnorreverse-engineeringshallbeallowed.Huawei-3ComVers
3、atileRoutingPlatformSoftwareVRP(R)software,Version3.40,ReleaseRT-0013Copyright(c)2003-2005HangzhouHuawei-3ComTech.Co.,Ltd.Allrightsreserved.Copyright(c)2000-2003HuaweiTech.Co.,Ltd.Allrightsreserved.QuidwayAR46-20uptimeis0week,0day,1hour,25minutesRpu'sversioninformation:RouterAR46-20with1PowerPC750
4、Processor256MbytesSDRAM32MbytesFLASH512KbytesNVRAMPcbVersion:RTM1RPUA.2RPELogicVersion:RPE3.4SBGLogicVersion:012SmallBootROMVersion:3.07BigBootROMVersion:5.14ConfigRegisterpointstoFLASH
[SLOT0]AUX0(Hardware)A.2,(Driver)1.0,(Cpld)3.4
[SLOT0]ETH0(Hardware)A.2,(Driver)1.0,(Cpld)3.4
[SLOT0]ETH1(Hardwa
5、re)A.2,(Driver)1.0,(Cpld)3.4[SLOT1]2FE(Hardware)2.1,(Driver)2.0,(Cpld)0.0[SLOT2]E1VI(Hardware)1.0,(Driver)2.7,(Cpld)1.0discur#sysnameNAT#FTPserverenable#l2tpdomainsuffix-separator@#radiusschemesystem#domainsystem#local-useradminpasswordcipher.]@USE=B,53Q=^Q`MAF4<<"TX$_S#6.NM(0=0)*5WWQ=^Q`MAF
6、4<<"TX$_S#6.Nservice-typetelnetterminallevel3service-typeftp#controllerE12/0/0usinge1#interfaceAux0asyncmodeflow#interfaceEthernet0/0/0ipaddress10.0.0.1255.255.255.0natserverprotocolicmpglobal10.0.0.3inside192.168.0.2#interfaceEthernet0/0/1ipaddress20.0.0.1255.255.255.0natserverprotocolicmpglobal2
7、0.0.0.3inside192.168.1.2#interfaceEthernet1/0/0ipaddress192.168.0.1255.255.255.0ipaddress192.168.1.1255.255.255.0subippolicyroute-policynat#interfaceEthernet1/0/1ipaddressdhcp-alloc#interfaceSerial2/0/0:0link-pro