华三MSR系列通过NAT对外提供www服务的配置

1、MSR1  配置

#

//用户NAT的地址池

nat address-group 1 202.100.1.3  202.100.1.6

#

//配置允许进行NAT转换的内网地址段

acl number 2000

rule 0  permit source 192.168.0.0 0.0.0.255

rule 1  deny

#

interface  GigabitEthernet0/0

port link-mode route

//在出接口上进行NAT转换

nat outbound 2000 address-group  1

//在出接口上配置内网服务器192.168.0.2的www服务

nat server protocol tcp  global 202.100.1.3 www inside 192.168.0.2 www

ip address 202.100.1.2  255.255.255.0

#

interface  GigabitEthernet0/1

port link-mode  route

//内网网关

ip address 192.168.0.1  255.255.255.0

#

//配置默认路由

ip route-static  0.0.0.0 0.0.0.0  202.100.1.1

#