1 拓扑案列
2 配置
pc 访问外网
#
interface LoopBack192
ip address 192.168.1.1 255.255.255.0
#
interface Vlan-interface1
ip address 10.1.1.1 255.255.255.0
#
#
ip route-static 0.0.0.0 0 10.1.1.2
#
local-user admin class manage
password hash $h$6$0XD4lCsmqgrjN2mp$fhTRFdSBPC1f+xRBOO4ObIthqLLv15lHRVcY8+n+ro3I3cDSY5B3OQOEok8RLumfHa2AVdOq26ETN3gS2DCv2A==
service-type ftp
authorization-attribute user-role level-15
authorization-attribute user-role network-admin
authorization-attribute user-role network-operator
#
ftp server enable
#
nat
#
interface GigabitEthernet0/0
port link-mode route
combo enable copper
ip address 10.1.1.2 255.255.255.0
#
interface GigabitEthernet0/1
port link-mode route
combo enable copper
ip address 100.1.1.1 255.255.255.0
nat outbound 2000 address-group 1
nat static enable
#
interface GigabitEthernet0/0
port link-mode route
combo enable copper
ip address 10.1.1.2 255.255.255.0
#
interface GigabitEthernet0/1
port link-mode route
combo enable copper
ip address 100.1.1.1 255.255.255.0
nat outbound 2000 address-group 1
nat static enable
#
user-group system
#
nat static outbound 192.168.1.1 100.1.1.4
#
nat address-group 1
address 100.1.1.4 100.1.1.4
===================================================
isp
interface LoopBack1
ip address 8.8.8.8 255.255.255.255
#
interface Vlan-interface1
ip address 100.1.1.2 255.255.255.0
测试
pc 上网