博达模块化路由器常用配置
合集下载
相关主题
- 1、下载文档前请自行甄别文档内容的完整性，平台不提供额外的编辑、内容补充、找答案等附加服务。
- 2、"仅部分预览"的文档,不可在线预览部分如存在完整性等问题,可反馈申请退款(可完整预览的文档不适用该条件!)。
- 3、如文档侵犯您的权益，请联系客服反馈,我们会尽快为您处理(人工客服工作时间：9:00-18:30)。
ip nat local-service icmp enable //
ip nat local-service udp enable //
ip nat local-service tcp enable //
!
interface FastEthernet0/1
deny tcp any any eq 139
deny tcp any any eq 445
deny tcp any any eq 3333
deny tcp any any eq 593
deny udp any any eq 135
deny udp any any eq tftp
no service password-encryption
!
!
interface FastEthernet0/0
ip address 119.184.117.226 255.255.255.254
no ip broadcast
ip nat outside //
deny udp any any eq 4444
deny udp any any eq 137
deny udp any any eq 138
permit ip any any //
!
!
ivr-cfg
!
ip nat translation max-links all 300 //
2、ip nat outside 端口的icmp、tcp、udp服务是可选的，如果不想让外界的icmp和tcp、udp连接进入；可以不用配置上述的三命命令！
博达模块化路由器配置(2621)
Router_config#show run
Building configuration...
Current configuration:
!
!version 1.3.1Q
service timestamps log date
service timestamps debug date
ip nat inside source list NAT interface FastEthernet0/0 //
配置说明：
1、在config#下配置：
username bdcom password 0 bdcom //名字和密码自定义
aaa authentication login default local ena //aaa认证
!
interface Async0/0
no ip address
no ip directed-broadcast
!
ip route default 119.184.117.225 //
!
gateway-cfg
Gateway keepAlive 60
shutdown
ip address 192.168.2.1 255.255.255.0 //
no ip directed-broadcast
ip access-group firewall in //
ip nat inside //
!
!
ip access-list standard NAT //
permit 192.168.2.0 255.255.255.0 //
!
!
ip access-list extended firewall //
deny tcp any any eq 135
ip nat local-service udp enable //
ip nat local-service tcp enable //
!
interface FastEthernet0/1
deny tcp any any eq 139
deny tcp any any eq 445
deny tcp any any eq 3333
deny tcp any any eq 593
deny udp any any eq 135
deny udp any any eq tftp
no service password-encryption
!
!
interface FastEthernet0/0
ip address 119.184.117.226 255.255.255.254
no ip broadcast
ip nat outside //
deny udp any any eq 4444
deny udp any any eq 137
deny udp any any eq 138
permit ip any any //
!
!
ivr-cfg
!
ip nat translation max-links all 300 //
2、ip nat outside 端口的icmp、tcp、udp服务是可选的，如果不想让外界的icmp和tcp、udp连接进入；可以不用配置上述的三命命令！
博达模块化路由器配置(2621)
Router_config#show run
Building configuration...
Current configuration:
!
!version 1.3.1Q
service timestamps log date
service timestamps debug date
ip nat inside source list NAT interface FastEthernet0/0 //
配置说明：
1、在config#下配置：
username bdcom password 0 bdcom //名字和密码自定义
aaa authentication login default local ena //aaa认证
!
interface Async0/0
no ip address
no ip directed-broadcast
!
ip route default 119.184.117.225 //
!
gateway-cfg
Gateway keepAlive 60
shutdown
ip address 192.168.2.1 255.255.255.0 //
no ip directed-broadcast
ip access-group firewall in //
ip nat inside //
!
!
ip access-list standard NAT //
permit 192.168.2.0 255.255.255.0 //
!
!
ip access-list extended firewall //
deny tcp any any eq 135