1:配置接口
interface GigabitEthernet0/0/1
description DianXin
ip address 222.177.xxx.xxx 255.255.255.224
interface GigabitEthernet0/0/2
description LianTong
ip address 113.204.xxx.xxx 255.255.255.240
interface GigabitEthernet0/0/3
description lan
ip address 1.1.1.1 255.255.255.248
2:配置zone,双线不能在同一个zone
trust
priority is 85
interface of the zone is (2):
GigabitEthernet0/0/0
GigabitEthernet0/0/3
untrust
priority is 5
interface of the zone is (1):
GigabitEthernet0/0/1 //电信
untrust1
priority is 6
interface of the zone is (1):
GigabitEthernet0/0/2 //联通
3:配置nat池和源nat配置
nat address-group 1 dianxin 222.177.xxx.xxx 222.177.xxx.xxx
nat address-group 2 liantong 113.204.xxx.xxx 113.204.xxx.xxx
nat-policy interzone trust untrust outbound
policy 1