园区网架构

文坛里的一根葱

配置参考：

     

SWA的配置

[H3C]sysname swa

[swa]link-aggregation group 1 mode manual

[swa]interface ethernet 0/1

[swa-e0/1]speed 100

[swa-e0/1]duplex full

[swa-e0/1]port link-aggregation group 1

[swa]interface ethernet 0/2

[swa-e0/2]speed 100

[swa-e0/2]duplex full

[swa-e0/2]port link-aggregation group 1

SWB的配置

[H3C]sysname swb

[swb]link-aggregation group 1 mode manual

[swb]interface ethernet 0/1

[swb-e0/1]speed 100

[swb-e0/1]duplex full

[swb-e0/1]port link-aggregation group 1

[swb]interface ethernet 0/2

[swb-e0/2]speed 100

[swb-e0/2]duplex full

[swb-e0/2]port link-aggregation group 1

中心路由器配置

[H3C]firewall enable       

[H3C]acl number 3000

[H3C-acl-adv-3000]rule permit tcp source 202.39.2.3 0 destination 10.1.1.4 0 destination-port eq 23

[H3C-acl-adv-3000]rule permit tcp source any destination 10.1.1.5 0 destination-port eq 80

[H3C-acl-adv-3000]rule deny tcp source any destination 10.1.1.4 0 destination-port eq 23

[H3C]acl number 3001

[H3C-acl-adv-3001]rule permit ip source 10.1.1.0 0.0.0.255 destination any

[H3C-acl-adv-3001]rule deny ip source any destination any

[H3C-Ethernet0/1]firewall packet-filter 3000 inbound

[H3C-Ethernet0/1]nat outbound 3001

[H3C-Ethernet0/1]nat server protocol tcp global 202.39.2.1 inside 10.1.1.42 telnet

[H3C-Ethernet0/11nat server protocol tcp global 202.39.2.1 inside 10.1.1.53 www

文坛里的一根葱

cklive77

可以的话给个拓扑图

gouerhuang

这叫架构吗？？？？Shit....

xingxu

Ρrover

  这是什么情况

ccie34

恭喜答对了

f1662

cec

yxabc

文坛里的一根葱 发表于 2013-8-10 12:45

                               
登录/注册后可看大图

资料很好

stl

沙发~支持楼主

xiaoxiaohe

学习

xiaoxiaohe

啥都没有？