华为防火墙NAT配置

实验拓扑图：

实验文档

 

配置R1 R2的IP地址

R1：

Huawei]sy

[Huawei]sysname r1

[r1]int g0/0/0

[r1-GigabitEthernet0/0/0]ip add 192.168.10.1 24

 

[r1-GigabitEthernet0/0/0]int g0/0/1

[r1-GigabitEthernet0/0/1]ip add 11.0.0.2 24

 

[r1]ip route-static 0.0.0.0 0.0.0.0 11.0.0.1 

 

 

R2：

[Huawei]sy

[Huawei]sysname r2

[r2]int g0/0/0

[r2-GigabitEthernet0/0/0]ip add 12.0.0.2 24

 

 

 

<SRG>sy

18:53:08  2017/10/13

Enter system view, return user view with Ctrl+Z.

[SRG]

[SRG]int g0/0/0

[SRG-GigabitEthernet0/0/0]ip add 11.0.0.1 24

 

[SRG-GigabitEthernet0/0/0]int g0/0/1

[SRG-GigabitEthernet0/0/1]ip add 12.0.0.1 24

 

[SRG]firewall zone trust

[SRG-zone-trust]add interface g0/0/0 将接口加入trust区域（默认安全级别85）

 

[SRG]firewall zone untrust

[SRG-zone-untrust]add interface g0/0/1 将接口键入untrust