园区网架构

UID: 137870

配置参考：

     

SWA的配置

[H3C]sysname swa

[swa]link-aggregation group 1 mode manual

[swa]interface ethernet 0/1

[swa-e0/1]speed 100

[swa-e0/1]duplex full

[swa-e0/1]port link-aggregation group 1

[swa]interface ethernet 0/2

[swa-e0/2]speed 100

[swa-e0/2]duplex full

[swa-e0/2]port link-aggregation group 1

SWB的配置

[H3C]sysname swb

[swb]link-aggregation group 1 mode manual

[swb]interface ethernet 0/1

[swb-e0/1]speed 100

[swb-e0/1]duplex full

[swb-e0/1]port link-aggregation group 1

[swb]interface ethernet 0/2

[swb-e0/2]speed 100

[swb-e0/2]duplex full

[swb-e0/2]port link-aggregation group 1

中心路由器配置

[H3C]firewall enable       

[H3C]acl number 3000

[H3C-acl-adv-3000]rule permit tcp source 202.39.2.3 0 destination 10.1.1.4 0 destination-port eq 23

[H3C-acl-adv-3000]rule permit tcp source any destination 10.1.1.5 0 destination-port eq 80

[H3C-acl-adv-3000]rule deny tcp source any destination 10.1.1.4 0 destination-port eq 23

[H3C]acl number 3001

[H3C-acl-adv-3001]rule permit ip source 10.1.1.0 0.0.0.255 destination any

[H3C-acl-adv-3001]rule deny ip source any destination any

[H3C-Ethernet0/1]firewall packet-filter 3000 inbound

[H3C-Ethernet0/1]nat outbound 3001

[H3C-Ethernet0/1]nat server protocol tcp global 202.39.2.1 inside 10.1.1.42 telnet

[H3C-Ethernet0/11nat server protocol tcp global 202.39.2.1 inside 10.1.1.53 www

UID: 137870

游客，如果您要查看本帖隐藏内容请登录

UID: 345290

游客，如果您要查看本帖隐藏内容请登录

UID: 25517

游客，如果您要查看本帖隐藏内容请登录

UID: 52806

游客，如果您要查看本帖隐藏内容请登录

UID: 326106

游客，如果您要查看本帖隐藏内容请登录

UID: 278866

游客，如果您要查看本帖隐藏内容请登录

UID: 62919

游客，如果您要查看本帖隐藏内容请登录

UID: 276994

游客，如果您要查看本帖隐藏内容请登录

UID: 420441

游客，如果您要查看本帖隐藏内容请登录

UID: 573285

游客，如果您要查看本帖隐藏内容请登录

UID: 906818

游客，如果您要查看本帖隐藏内容请登录

UID: 906818

游客，如果您要查看本帖隐藏内容请登录