本文介紹了華為3com路由器的端口映射的方法,並且給出了詳細的操作步驟和命令語句,相信看完此文會對具體配置有詳細的瞭解。
************************************************** ******************************
* Copyright(c) 2004-2006 Hangzhou Huawei-3Com Tech. Co., Ltd. *
* Without the owner''''s prior written consent, *
* no decompiling or reverse-engineering shall be allowed. *
************************************************** ******************************
Login authentication
Username:admin
Password:
dis int <-(預示端口狀況)
Ethernet1/0 current state :UP
Line protocol current state :UP
Description : Ethernet1/0 Interface
The Maximum Transmit Unit is 1500, Hold timer is 10(sec)
Internet Address is <---(找到公網地址的端口)
IP Sending Frames'''' Format is PKTFMT_ETHNT_2, Hardware address is 000f-e24b-90c1
Media type is twisted pair, loopback not set, promiscuous mode not set
100Mb/s, Full-duplex, link type is autonegotiation
Output flow-control is disabled, input flow-control is disabled
Output queue : (Urgent queuing : Size/Length/Discards) 0/50/0
Output queue : (Protocol queuing : Size/Length/Discards) 0/500/0
Output queue : (FIFO queuing : Size/Length/Discards) 0/75/0
Last clearing of counters: Never
Last 300 seconds input rate 76409.96 bytes/sec, 611279 bits/sec, 221.16 packets/sec
Last 300 seconds output rate 169645.62 bytes/sec, 1357165 bits/sec, 217.84 packets/sec
Input: 84913558 packets, 1899317081 bytes, 84913558 buffers
1556505 broadcasts, 124223 multicasts, 0 pauses
374 errors, 0 runts, 0 giants
0 crc, 0 align errors, 374 overruns
0 dribbles, 0 drops, 0 no buffers
Output:73691649 packets, 1323897889 bytes, 73691649 buffers
19084 broadcasts, 0 multicasts, 0 pauses
0 errors, 0 underruns, 0 collisions
0 deferred, 0 lost carriers
sys <--(步入體系視圖)
[H3C]int e1/0
[H3C]nat server protocol tcp global www inside www
[H3C]nat server protocol tcp global 22 inside 22
[H3C]nat server protocol udp global snmp inside snmp
[H3C]nat server protocol udp global snmptrap inside snmptrap <--(一看就大白tcp/udp是以及談,www是80,snmp以及snmptrap是161.162端口)
[H3C]dis thellos
interface Ethernet1/0
ip address
firewall packet-filter 3000 inbound
nat outbound 3001 <--(這是客户上彀用的地址池不消管,其它的`就是端口照射了)
nat server protocol tcp global www inside www
nat server protocol tcp global 22 inside 22
nat server protocol udp global snmp inside snmp
nat server protocol udp global snmptrap inside snmptrap
思科網絡的端口照射原理是同樣的號令紛歧樣罷了,這搭只給出配備佈置。
思科網絡>en
思科網絡#config t
思科網絡(config)Ip nat inside source static tcp 80 80
思科網絡(config)Ip nat inside source static tcp 22 22
思科網絡(config)Ip nat inside source static tcp 161 161
思科網絡(config)Ip nat inside source static tcp 162 162