AR2831双出口最终配置

作者：吸烟有害但是健康1988 | 来源：互联网 | 2023-09-16 07:59

http:forum.h3c.comthread-23813-1-1.html配置环境：WAN0：interfaceEthernet00ipaddres

http://forum.h3c.com/thread-23813-1-1.html

配置环境&＃xff1a;
WAN0&＃xff1a;
interface Ethernet0/0
ip address 1.1.1.2 255.255.255.224    #电信

WAN1&＃xff1a;
interface Ethernet0/1
ip address 2.2.2.2 255.255.255.128    #网通

LAN&＃xff08;增加一块RT-8LS以太网接口卡&＃xff0c;价格便宜不支持链路聚合&＃xff09;&＃xff1a;

interface Ethernet1/0 &＃xff08;RT-8LS的二层交换端口&＃xff09;
#
interface Ethernet1/1 &＃xff08;RT-8LS的二层交换端口&＃xff09;
#
interface Ethernet1/2 &＃xff08;RT-8LS的二层交换端口&＃xff09;
#
interface Ethernet1/3 &＃xff08;RT-8LS的二层交换端口&＃xff09;
#
interface Ethernet1/4 &＃xff08;RT-8LS的二层交换端口&＃xff09;
#
interface Ethernet1/5 &＃xff08;RT-8LS的二层交换端口&＃xff09;
#
interface Ethernet1/6 &＃xff08;RT-8LS的二层交换端口&＃xff09;
#
interface Ethernet1/7 &＃xff08;RT-8LS的二层交换端口&＃xff09;
#
interface Ethernet1/8 &＃xff08;RT-8LS的虚拟三层端口&＃xff09;
ip address 192.168.111.254 255.255.255.0          #内网

以下是配置文件&＃xff08;请参考&＃xff09;&＃xff1a;
#
sysname AR2831
#
super password level 3 simple ********
#
firewall enable
#
radius scheme system
#
domain system
#
local-user admin
password cipher .]&＃64;USE&＃61;B,53Q&＃61;^Q&＃96;MAF4<1!!
service-type telnet terminal
level 3
service-type ftp
#
acl number 2000
rule 0 permit source 192.168.111.0 0.0.0.255
rule 1 deny
#
acl number 3000 match-order auto
acl number 3110
rule 1 deny tcp source-port eq 1025
rule 2 deny tcp source-port eq 5554
rule 3 deny tcp source-port eq 9996
rule 4 deny tcp source-port eq 1068
rule 5 deny tcp source-port eq 135
rule 6 deny udp source-port eq 135
rule 7 deny tcp source-port eq 137
rule 8 deny udp source-port eq netbios-ns
rule 9 deny tcp source-port eq 138
rule 10 deny udp source-port eq netbios-dgm
rule 11 deny tcp source-port eq 139
rule 12 deny udp source-port eq netbios-ssn
rule 13 deny tcp source-port eq 593
rule 14 deny tcp source-port eq 4444
rule 15 deny tcp source-port eq 5900
rule 16 deny tcp source-port eq 8998
rule 17 deny tcp source-port eq 445
rule 18 deny udp source-port eq 445
rule 19 deny udp source-port eq 1434
rule 20 deny tcp destination-port eq 3127
rule 21 deny tcp destination-port eq 1025
rule 22 deny tcp destination-port eq 5554
rule 23 deny tcp destination-port eq 9996
rule 24 deny tcp destination-port eq 1068
rule 25 deny tcp destination-port eq 135
rule 26 deny udp destination-port eq 135
rule 27 deny tcp destination-port eq 137
rule 28 deny udp destination-port eq netbios-ns
rule 29 deny tcp destination-port eq 138
rule 30 deny udp destination-port eq netbios-dgm
rule 31 deny tcp destination-port eq 139
rule 32 deny udp destination-port eq netbios-ssn
rule 33 deny tcp destination-port eq 593
rule 34 deny tcp destination-port eq 4444
rule 35 deny tcp destination-port eq 5800
rule 36 deny tcp destination-port eq 5900
rule 37 deny tcp destination-port eq 8998
rule 38 deny tcp destination-port eq 445
rule 39 deny udp destination-port eq 445
rule 40 deny udp destination-port eq 1434
rule 41 deny tcp source-port eq 3127
rule 42 deny tcp source-port eq 5800
rule 43 deny tcp destination 1.1.1.2 0 destination-port eq telnet
rule 44 deny icmp destination 1.1.1.2 0 icmp-type echo
rule 45 deny icmp destination 1.1.1.2 0
rule 46 deny tcp destination 2.2.2.2 0 destination-port eq telnet
rule 47 deny icmp destination 2.2.2.2 0 icmp-type echo
rule 48 deny icmp destination 2.2.2.2 0
acl number 3111
rule 0 deny tcp destination 1.1.1.2 0 destination-port eq telnet
rule 1 deny tcp destination 192.168.111.254 0 destination-port eq telnet
rule 2 deny tcp source-port eq 3127
rule 3 deny tcp source-port eq 1025
rule 4 deny tcp source-port eq 5554
rule 5 deny tcp source-port eq 9996
rule 6 deny tcp source-port eq 1068
rule 7 deny tcp source-port eq 135
rule 8 deny udp source-port eq 135
rule 9 deny tcp source-port eq 137
rule 10 deny udp source-port eq netbios-ns
rule 11 deny tcp source-port eq 138
rule 12 deny udp source-port eq netbios-dgm
rule 13 deny tcp source-port eq 139
rule 14 deny udp source-port eq netbios-ssn
rule 15 deny tcp source-port eq 593
rule 16 deny tcp source-port eq 4444
rule 17 deny tcp source-port eq 5800
rule 18 deny tcp source-port eq 5900
rule 19 deny tcp source-port eq 8998
rule 20 deny tcp source-port eq 445
rule 21 deny udp source-port eq 445
rule 22 deny udp source-port eq 1434
rule 23 deny tcp destination-port eq 3127
rule 24 deny tcp destination-port eq 1025
rule 25 deny tcp destination-port eq 5554
rule 26 deny tcp destination-port eq 9996
rule 27 deny tcp destination-port eq 1068
rule 28 deny tcp destination-port eq 135
rule 29 deny udp destination-port eq 135
rule 30 deny tcp destination-port eq 137
rule 31 deny udp destination-port eq netbios-ns
rule 32 deny tcp destination-port eq 138
rule 33 deny udp destination-port eq netbios-dgm
rule 34 deny tcp destination-port eq 139
rule 35 deny udp destination-port eq netbios-ssn
rule 36 deny tcp destination-port eq 593
rule 37 deny tcp destination-port eq 4444
rule 38 deny tcp destination-port eq 5800
rule 39 deny tcp destination-port eq 5900
rule 40 deny tcp destination-port eq 8998
rule 41 deny tcp destination-port eq 445
rule 42 deny udp destination-port eq 445
rule 43 deny udp destination-port eq 1434
rule 44 deny tcp destination 2.2.2.2 0 destination-port eq telnet
#
interface Aux0
async mode flow
#
interface Ethernet0/0
ip address 1.1.1.2 255.255.255.224
firewall packet-filter 3110 inbound
nat outbound 2000
#
interface Ethernet0/1
ip address 2.2.2.2 255.255.255.128
firewall packet-filter 3110 inbound
nat outbound 2000
#
interface Ethernet1/0
#
interface Ethernet1/1
#
interface Ethernet1/2
#
interface Ethernet1/3
#
interface Ethernet1/4
#
interface Ethernet1/5
#
interface Ethernet1/6
#
interface Ethernet1/7
#
interface Ethernet1/8
ip address 192.168.111.254 255.255.255.0
firewall packet-filter 3111 inbound
#
interface NULL0

查

TOP

#
ip route-static 0.0.0.0 0.0.0.0 1.1.1.1 preference 60
ip route-static 0.0.0.0 0.0.0.0 2.2.2.1 preference 80
ip route-static 58.16.0.0 255.255.0.0 2.2.2.1 preference 60
ip route-static 58.17.0.0 255.255.128.0 2.2.2.1 preference 60
ip route-static 58.17.128.0 255.255.128.0 2.2.2.1 preference 60
ip route-static 58.18.0.0 255.255.0.0 2.2.2.1 preference 60
ip route-static 58.19.0.0 255.255.0.0 2.2.2.1 preference 60
ip route-static 58.20.0.0 255.255.0.0 2.2.2.1 preference 60
ip route-static 58.21.0.0 255.255.0.0 2.2.2.1 preference 60
ip route-static 58.22.0.0 255.254.0.0 2.2.2.1 preference 60
ip route-static 58.240.0.0 255.254.0.0 2.2.2.1 preference 60
ip route-static 58.242.0.0 255.254.0.0 2.2.2.1 preference 60
ip route-static 58.244.0.0 255.254.0.0 2.2.2.1 preference 60
ip route-static 58.246.0.0 255.254.0.0 2.2.2.1 preference 60
ip route-static 58.248.0.0 255.248.0.0 2.2.2.1 preference 60
ip route-static 60.0.0.0 255.248.0.0 2.2.2.1 preference 60
ip route-static 60.8.0.0 255.254.0.0 2.2.2.1 preference 60
ip route-static 60.10.0.0 255.255.0.0 2.2.2.1 preference 60
ip route-static 60.11.0.0 255.255.0.0 2.2.2.1 preference 60
ip route-static 60.12.0.0 255.255.0.0 2.2.2.1 preference 60
ip route-static 60.13.0.0 255.255.192.0 2.2.2.1 preference 60
ip route-static 60.13.128.0 255.255.128.0 2.2.2.1 preference 60
ip route-static 60.14.0.0 255.254.0.0 2.2.2.1 preference 60
ip route-static 60.16.0.0 255.240.0.0 2.2.2.1 preference 60
ip route-static 60.16.0.0 255.248.0.0 2.2.2.1 preference 60
ip route-static 60.24.0.0 255.252.0.0 2.2.2.1 preference 60
ip route-static 60.30.0.0 255.255.0.0 2.2.2.1 preference 60
ip route-static 60.31.0.0 255.255.0.0 2.2.2.1 preference 60
ip route-static 60.208.0.0 255.248.0.0 2.2.2.1 preference 60
ip route-static 60.216.0.0 255.254.0.0 2.2.2.1 preference 60
ip route-static 60.218.0.0 255.254.0.0 2.2.2.1 preference 60
ip route-static 60.220.0.0 255.252.0.0 2.2.2.1 preference 60
ip route-static 61.48.0.0 255.248.0.0 2.2.2.1 preference 60
ip route-static 61.52.0.0 255.254.0.0 2.2.2.1 preference 60
ip route-static 61.54.0.0 255.255.0.0 2.2.2.1 preference 60
ip route-static 61.55.0.0 255.255.0.0 2.2.2.1 preference 60
ip route-static 61.133.0.0 255.255.128.0 2.2.2.1 preference 60
ip route-static 61.134.96.0 255.255.224.0 2.2.2.1 preference 60
ip route-static 61.134.128.0 255.255.192.0 2.2.2.1 preference 60
ip route-static 61.134.192.0 255.255.192.0 2.2.2.1 preference 60
ip route-static 61.135.0.0 255.255.0.0 2.2.2.1 preference 60
ip route-static 61.136.64.0 255.255.192.0 2.2.2.1 preference 60
ip route-static 61.137.128.0 255.255.128.0 2.2.2.1 preference 60
ip route-static 61.138.0.0 255.255.128.0 2.2.2.1 preference 60
ip route-static 61.138.0.0 255.255.192.0 2.2.2.1 preference 60
ip route-static 61.138.64.0 255.255.192.0 2.2.2.1 preference 60
ip route-static 61.138.128.0 255.255.192.0 2.2.2.1 preference 60
ip route-static 61.139.128.0 255.255.192.0 2.2.2.1 preference 60
ip route-static 61.140.0.0 255.252.0.0 1.1.1.1 preference 60
ip route-static 61.144.0.0 255.252.0.0 1.1.1.1 preference 60
ip route-static 61.148.0.0 255.254.0.0 2.2.2.1 preference 60
ip route-static 61.156.0.0 255.255.0.0 2.2.2.1 preference 60
ip route-static 61.158.128.0 255.255.128.0 2.2.2.1 preference 60
ip route-static 61.159.0.0 255.255.192.0 2.2.2.1 preference 60
ip route-static 61.161.0.0 255.255.192.0 2.2.2.1 preference 60
ip route-static 61.161.128.0 255.255.128.0 2.2.2.1 preference 60
ip route-static 61.162.0.0 255.255.0.0 2.2.2.1 preference 60
ip route-static 61.163.0.0 255.255.0.0 2.2.2.1 preference 60
ip route-static 61.167.0.0 255.255.0.0 2.2.2.1 preference 60
ip route-static 61.168.0.0 255.255.0.0 2.2.2.1 preference 60
ip route-static 61.172.0.0 255.252.0.0 1.1.1.1 preference 60
ip route-static 61.176.0.0 255.255.0.0 2.2.2.1 preference 60
ip route-static 61.179.0.0 255.255.0.0 2.2.2.1 preference 60
ip route-static 61.180.128.0 255.255.128.0 2.2.2.1 preference 60
ip route-static 61.181.0.0 255.255.0.0 2.2.2.1 preference 60
ip route-static 61.182.0.0 255.255.0.0 2.2.2.1 preference 60
ip route-static 61.189.0.0 255.255.128.0 2.2.2.1 preference 60
ip route-static 124.64.0.0 255.254.0.0 2.2.2.1 preference 60
ip route-static 124.88.0.0 255.255.0.0 2.2.2.1 preference 60
ip route-static 124.89.0.0 255.255.128.0 2.2.2.1 preference 60
ip route-static 124.92.0.0 255.252.0.0 2.2.2.1 preference 60
ip route-static 125.32.0.0 255.255.0.0 2.2.2.1 preference 60
ip route-static 125.33.0.0 255.255.0.0 2.2.2.1 preference 60
ip route-static 125.34.0.0 255.255.0.0 2.2.2.1 preference 60
ip route-static 125.35.0.0 255.255.128.0 2.2.2.1 preference 60
ip route-static 125.35.128.0 255.255.128.0 2.2.2.1 preference 60
ip route-static 125.36.0.0 255.252.0.0 2.2.2.1 preference 60
ip route-static 125.40.0.0 255.248.0.0 2.2.2.1 preference 60
ip route-static 202.96.0.0 255.255.192.0 2.2.2.1 preference 60
ip route-static 202.96.64.0 255.255.224.0 2.2.2.1 preference 60
ip route-static 202.96.72.0 255.255.248.0 2.2.2.1 preference 60
ip route-static 202.96.168.0 255.255.248.0 1.1.1.1 preference 60
ip route-static 202.97.128.0 255.255.128.0 2.2.2.1 preference 60
ip route-static 202.97.224.0 255.255.248.0 2.2.2.1 preference 60
ip route-static 202.97.240.0 255.255.240.0 2.2.2.1 preference 60
ip route-static 202.98.0.0 255.255.224.0 2.2.2.1 preference 60
ip route-static 202.98.8.0 255.255.248.0 2.2.2.1 preference 60
ip route-static 202.99.64.0 255.255.224.0 2.2.2.1 preference 60

查看详细资料

TOP

ip route-static 202.99.96.0 255.255.248.0 2.2.2.1 preference 60
ip route-static 202.99.128.0 255.255.224.0 2.2.2.1 preference 60
ip route-static 202.99.160.0 255.255.248.0 2.2.2.1 preference 60
ip route-static 202.99.168.0 255.255.248.0 2.2.2.1 preference 60
ip route-static 202.99.176.0 255.255.240.0 2.2.2.1 preference 60
ip route-static 202.99.208.0 255.255.240.0 2.2.2.1 preference 60
ip route-static 202.99.224.0 255.255.248.0 2.2.2.1 preference 60
ip route-static 202.99.232.0 255.255.248.0 2.2.2.1 preference 60
ip route-static 202.99.240.0 255.255.240.0 2.2.2.1 preference 60
ip route-static 202.102.128.0 255.255.192.0 2.2.2.1 preference 60
ip route-static 202.102.224.0 255.255.248.0 2.2.2.1 preference 60
ip route-static 202.102.232.0 255.255.248.0 2.2.2.1 preference 60
ip route-static 202.104.0.0 255.254.0.0 1.1.1.1 preference 60
ip route-static 202.106.0.0 255.255.0.0 2.2.2.1 preference 60
ip route-static 202.107.0.0 255.255.128.0 2.2.2.1 preference 60
ip route-static 202.108.0.0 255.255.0.0 2.2.2.1 preference 60
ip route-static 202.110.0.0 255.255.128.0 2.2.2.1 preference 60
ip route-static 202.110.128.0 255.255.192.0 2.2.2.1 preference 60
ip route-static 202.110.192.0 255.255.192.0 2.2.2.1 preference 60
ip route-static 202.111.128.0 255.255.192.0 2.2.2.1 preference 60
ip route-static 203.93.8.0 255.255.255.0 2.2.2.1 preference 60
ip route-static 203.93.192.0 255.255.192.0 2.2.2.1 preference 60
ip route-static 210.12.0.0 255.252.0.0 2.2.2.1 preference 60
ip route-static 210.13.128.0 255.255.128.0 2.2.2.1 preference 60
ip route-static 210.14.160.0 255.255.224.0 2.2.2.1 preference 60
ip route-static 210.14.192.0 255.255.224.0 2.2.2.1 preference 60
ip route-static 210.15.32.0 255.255.224.0 2.2.2.1 preference 60
ip route-static 210.15.96.0 255.255.224.0 2.2.2.1 preference 60
ip route-static 210.15.128.0 255.255.192.0 2.2.2.1 preference 60
ip route-static 210.21.0.0 255.255.0.0 2.2.2.1 preference 60
ip route-static 210.22.0.0 255.255.0.0 2.2.2.1 preference 60
ip route-static 210.51.0.0 255.255.0.0 2.2.2.1 preference 60
ip route-static 210.52.0.0 255.255.0.0 2.2.2.1 preference 60
ip route-static 210.53.0.0 255.255.0.0 2.2.2.1 preference 60
ip route-static 210.82.0.0 255.255.0.0 2.2.2.1 preference 60
ip route-static 210.83.0.0 255.255.0.0 2.2.2.1 preference 60
ip route-static 218.7.0.0 255.255.0.0 2.2.2.1 preference 60
ip route-static 218.8.0.0 255.252.0.0 2.2.2.1 preference 60
ip route-static 218.10.0.0 255.254.0.0 2.2.2.1 preference 60
ip route-static 218.11.0.0 255.255.0.0 2.2.2.1 preference 60
ip route-static 218.12.0.0 255.255.0.0 2.2.2.1 preference 60
ip route-static 218.16.0.0 255.252.0.0 1.1.1.1 preference 60
ip route-static 218.21.128.0 255.255.128.0 2.2.2.1 preference 60
ip route-static 218.24.0.0 255.252.0.0 2.2.2.1 preference 60
ip route-static 218.25.0.0 255.255.0.0 2.2.2.1 preference 60
ip route-static 218.26.0.0 255.255.0.0 2.2.2.1 preference 60
ip route-static 218.27.0.0 255.255.0.0 2.2.2.1 preference 60
ip route-static 218.28.0.0 255.254.0.0 2.2.2.1 preference 60
ip route-static 218.56.0.0 255.252.0.0 2.2.2.1 preference 60
ip route-static 218.60.0.0 255.254.0.0 2.2.2.1 preference 60
ip route-static 218.62.0.0 255.255.128.0 2.2.2.1 preference 60
ip route-static 218.67.128.0 255.255.128.0 2.2.2.1 preference 60
ip route-static 218.68.0.0 255.254.0.0 2.2.2.1 preference 60
ip route-static 218.104.0.0 255.255.128.0 2.2.2.1 preference 60
ip route-static 218.104.128.0 255.255.224.0 2.2.2.1 preference 60
ip route-static 218.104.160.0 255.255.224.0 2.2.2.1 preference 60
ip route-static 218.104.192.0 255.255.248.0 2.2.2.1 preference 60
ip route-static 218.104.200.0 255.255.248.0 2.2.2.1 preference 60
ip route-static 218.104.208.0 255.255.240.0 2.2.2.1 preference 60
ip route-static 218.104.224.0 255.255.224.0 2.2.2.1 preference 60
ip route-static 218.105.0.0 255.255.0.0 2.2.2.1 preference 60
ip route-static 218.106.0.0 255.254.0.0 2.2.2.1 preference 60
ip route-static 219.128.0.0 255.240.0.0 1.1.1.1 preference 60
ip route-static 219.142.0.0 255.254.0.0 2.2.2.1 preference 60
ip route-static 219.154.0.0 255.254.0.0 2.2.2.1 preference 60
ip route-static 219.156.0.0 255.254.0.0 2.2.2.1 preference 60
ip route-static 219.158.0.0 255.255.0.0 2.2.2.1 preference 60
ip route-static 219.159.0.0 255.255.192.0 2.2.2.1 preference 60
ip route-static 220.248.0.0 255.255.0.0 2.2.2.1 preference 60
ip route-static 220.252.0.0 255.255.0.0 2.2.2.1 preference 60
ip route-static 221.0.0.0 255.252.0.0 2.2.2.1 preference 60
ip route-static 221.4.0.0 255.254.0.0 2.2.2.1 preference 60
ip route-static 221.6.0.0 255.255.0.0 2.2.2.1 preference 60
ip route-static 221.7.0.0 255.255.192.0 2.2.2.1 preference 60
ip route-static 221.7.64.0 255.255.224.0 2.2.2.1 preference 60
ip route-static 221.7.128.0 255.255.128.0 2.2.2.1 preference 60
ip route-static 221.8.0.0 255.254.0.0 2.2.2.1 preference 60
ip route-static 221.10.0.0 255.255.0.0 2.2.2.1 preference 60
ip route-static 221.11.0.0 255.255.128.0 2.2.2.1 preference 60
ip route-static 221.11.128.0 255.255.192.0 2.2.2.1 preference 60
ip route-static 221.11.192.0 255.255.224.0 2.2.2.1 preference 60
ip route-static 221.12.0.0 255.255.128.0 2.2.2.1 preference 60
ip route-static 221.12.128.0 255.255.192.0 2.2.2.1 preference 60
ip route-static 221.13.0.0 255.255.192.0 2.2.2.1 preference 60
ip route-static 221.13.64.0 255.255.224.0 2.2.2.1 preference 60
ip route-static 221.13.96.0 255.255.224.0 2.2.2.1 preference 60
ip route-static 221.13.128.0 255.255.128.0 2.2.2.1 preference 60
ip route-static 221.14.0.0 255.254.0.0 2.2.2.1 preference 60
ip route-static 221.128.0.0 255.240.0.0 2.2.2.1 preference 60
ip route-static 221.192.0.0 255.252.0.0 2.2.2.1 preference 60
ip route-static 221.196.0.0 255.254.0.0 2.2.2.1 preference 60
ip route-static 221.198.0.0 255.255.0.0 2.2.2.1 preference 60
ip route-static 221.199.0.0 255.255.224.0 2.2.2.1 preference 60
ip route-static 221.199.32.0 255.255.240.0 2.2.2.1 preference 60
ip route-static 221.199.48.0 255.255.240.0 2.2.2.1 preference 60
ip route-static 221.199.64.0 255.255.192.0 2.2.2.1 preference 60
ip route-static 221.199.128.0 255.255.192.0 2.2.2.1 preference 60
ip route-static 221.199.192.0 255.255.240.0 2.2.2.1 preference 60
ip route-static 221.200.0.0 255.252.0.0 2.2.2.1 preference 60
ip route-static 221.204.0.0 255.254.0.0 2.2.2.1 preference 60
ip route-static 221.207.0.0 255.255.192.0 2.2.2.1 preference 60
ip route-static 221.208.0.0 255.252.0.0 2.2.2.1 preference 60
ip route-static 221.212.0.0 255.254.0.0 2.2.2.1 preference 60
ip route-static 221.216.0.0 255.248.0.0 2.2.2.1 preference 60
ip route-static 222.128.0.0 255.240.0.0 2.2.2.1 preference 60
ip route-static 222.160.0.0 255.254.0.0 2.2.2.1 preference 60
ip route-static 222.162.0.0 255.255.0.0 2.2.2.1 preference 60
ip route-static 222.163.0.0 255.255.224.0 2.2.2.1 preference 60
ip route-static 222.163.32.0 255.255.224.0 2.2.2.1 preference 60
ip route-static 222.163.64.0 255.255.192.0 2.2.2.1 preference 60
ip route-static 222.163.128.0 255.255.128.0 2.2.2.1 preference 60
#
user-interface con 0
user-interface aux 0
user-interface vty 0 4
authentication-mode scheme
#
return