【无标题】实现内外网互通。

Zackhj

已于 2022-09-06 19:57:36 修改

阅读量151

点赞数

文章标签： java servlet junit

于 2022-09-06 19:52:40 首次发布

本文链接：https://blog.csdn.net/Zackhj/article/details/126732449

版权

配置华为路由器AR1、AR2和AR3进行DHCP服务、IP地址分配、VLAN划分、路由及ACL规则。AR1设置两个接口IP地址，并创建两个IP池；AR2配置接口IP地址，设定出站流量过滤和NAT转换规则；AR3配置接口IP地址并建立VLAN。这些配置用于构建和保护网络基础设施。

摘要由CSDN通过智能技术生成

AR1：
[Huawei]dhcp enable
[Huawei]int g0/0/0
[Huawei-GigabitEthernet0/0/0]ip add 192.168.1.254 24
[Huawei-GigabitEthernet0/0/0]q
[Huawei]int g0/0/1
[Huawei-GigabitEthernet0/0/1]ip add 192.168.2.1 24
[Huawei-GigabitEthernet0/0/1]q
[Huawei]ip ro 0.0.0.0 0 192.168.2.2
[Huawei-ip-pool-p1]network 192.168.1.0 mask 26
[Huawei-ip-pool-p1]gateway-list 192.168.1.62
[Huawei-ip-pool-p1]dns-list 8.8.8.8
[Huawei-ip-pool-p1]lease day 3
[Huawei-ip-pool-p1]q
[Huawei]ip pool p2
[Huawei-ip-pool-p2]network 192.168.1.64 mask 26
[Huawei-ip-pool-p2]g
[Huawei-ip-pool-p2]gateway-list 192.168.1.126
[Huawei-ip-pool-p2]dns-list 8.8.8.8
[Huawei-ip-pool-p2]lease day 3
[Huawei-ip-pool-p2]q
[Huawei]int g0/0/0
[Huawei-GigabitEthernet0/0/0]dhcp select global
[Huawei-GigabitEthernet0/0/0.1]dot1q termination vid 100
[Huawei-GigabitEthernet0/0/0.1]ip add 192.168.1.62 26
[Huawei-GigabitEthernet0/0/0.1]arp broadcast enable
[Huawei-GigabitEthernet0/0/0.1]int g0/0/0.2
[Huawei-GigabitEthernet0/0/0.2]dot1q termination vid 200
[Huawei-GigabitEthernet0/0/0.2]ip add
[Huawei-GigabitEthernet0/0/0.2]ip add 192.168.1.126 26
[Huawei-GigabitEthernet0/0/0.2]arp broadcast enable
[Huawei]int g0/0/0.1
[Huawei-GigabitEthernet0/0/0.1]dhcp select global
[Huawei-GigabitEthernet0/0/0.1]int g0/0/0.2
[Huawei-GigabitEthernet0/0/0.2]dhcp select global
[Huawei-GigabitEthernet0/0/0.2]
AR2：
acl number 2000
rule 1 deny source 192.168.1.60 0
rule 5 deny source 192.168.1.61 0

rule 20 permit source 192.168.1.0 0.0.0.255
rule 30 deny source 192.168.1.0 0.0.0.63
#
interface GigabitEthernet0/0/0
ip address 192.168.2.2 255.255.255.0
#
interface GigabitEthernet0/0/1
ip address 200.1.1.1 255.255.255.0
traffic-filter outbound acl 2000
nat outbound 2000
#
ip route-static 192.168.1.0 255.255.255.0 192.168.2.1
ip route-static 200.1.1.0 255.255.255.0 200.1.1.2
ip route-static 200.1.2.0 255.255.255.0 200.1.1.2
#
<Huawei>u t m
Info: Current terminal monitor is off.
<Huawei>sy
Enter system view, return user view with Ctrl+Z.
[Huawei]int 0/0/0
^
AR3：
[Huawei]int g0/0/0
[Huawei-GigabitEthernet0/0/0]ip add 200.1.1.2 24
[Huawei-GigabitEthernet0/0/0]int g0/0/1
[Huawei-GigabitEthernet0/0/1]ip add 200.1.2.254 24
交换机：3
vlan batch 100 200
[Huawei]int g0/0/1
[Huawei-GigabitEthernet0/0/1]p l a
[Huawei-GigabitEthernet0/0/1]p d v 100
[Huawei-GigabitEthernet0/0/1]int g0/0/2
[Huawei-GigabitEthernet0/0/2]p l a
[Huawei-GigabitEthernet0/0/2]p d v 200
[Huawei-GigabitEthernet0/0/2]int g0/0/3
[Huawei-GigabitEthernet0/0/3]p l t
[Huawei-GigabitEthernet0/0/3]p t a v a
[Huawei-GigabitEthernet0/0/3]int g0/0/4
[Huawei-GigabitEthernet0/0/4]p l t
[Huawei-GigabitEthernet0/0/4]p t a v a