H3C-MSR路由器配置

配置telnet登录

telnet server enable

创建本地账号与密码

local-user admin

password simple hnjb8013

user-interface vty 0 4

authentication-mode schema

user-role level-15

配置WAN口地址

system-view

[H3C]interface GigabitEthernet 0/0

[H3C-GigabitEthernet0/0]ip address 119.57.73.67 255.255.255.248 //IP地址和掩码配置运营商分配的地址

[H3C-GigabitEthernet0/0]quit

设置内网网关2)

[H3C]interface GigabitEthernet 0/1

[H3C-GigabitEthernet0/1]ip address 192.168.1.1 24//内网网关IP地址

[H3C-GigabitEthernet0/1]quit

设置DHCP

system-view

[H3C]dhcp server ip-pool 1

[H3C-dhcp-pool-1]network 192.168.1.0 mask 255.255.255.0

[H3C-dhcp-pool-1]gateway-list 192.168.1.1

[H3C-dhcp-pool-1]address range 192.168.1.2 192.168.1.200 地址池

[H3C-dhcp-pool-1]dns-list202.106.0.20 114.114.114.114 //具体的运营商DNS地址[H3C-dhcp-pool-1]quit

在WAN接口配置NAT，实现内网地址上网进行源地址转换。4)

[H3C]interface GigabitEthernet 0/0

[H3C-GigabitEthernet0/0]nat outbound

配置默认路由5)

[H3C]ip route-static 0.0.0.0 0.0.0.0 119.57.73.65 //下一跳地址配置运营商分配的网关地址

Nat一对一NAT

system-view

[H3C]nat static outbound 192.168.1.248 119.57.73.70

[H3C]interface GigabitEthernet0/0

[H3C-GigabitEthernet0/0]ip address 119.57.73.70 255.255.255.248 sub

[H3C-GigabitEthernet0/0]nat static enable

[H3C-GigabitEthernet0/0]quit

NAT端口映射

system-view//进入设备公网接口[H3C]interface GigabitEthernet 0/0

[H3C-GigabitEthernet0/0]

nat server protocol tcp global 119.57.73.67 5366 inside 192.168.1.67 5366

nat server protocol tcp global 119.57.73.67 5367 inside 192.168.1.67 5367

nat server protocol tcp global 119.57.73.67 8081 inside 192.168.1.244 8081

nat server protocol tcp global 119.57.73.67 8123 inside 192.168.1.250 8443

nat server protocol tcp global 119.57.73.67 33890 inside 192.168.1.88 3389

L2TP over ipsec

1.开启L2TP功能。

system-view

[H3C]l2tp enable

2.配置本地用户名和密码，可配置多个用户

[H3C]local-user hnjb class network //配置拨号用户名

New local user added.

[H3C-luser-network-hnjb]password simple hnjb8013//配置拨号密码

[H3C-luser-network-hnjb]service-type ppp

[H3C-luser-network-hnjb]quit

地址池IP配置用户认证方式和3.

[H3C]domain system

[H3C-isp-system]authentication ppp local //配置PPP用户的认证方式为本地认证

[H3C-isp-system]quit

[H3C]ip pool 10 10.1.1.10 10.1.1.100 //配置为拨入终端分配的IP地址范围

4. 创建虚拟模板接口

[H3C]interface Virtual-T emplate0

[H3C-Virtual-Template0]ppp authentication-mode chap//配置本端PPP协议对终端的验证方式为CHAP

[H3C-Virtual-Template0]remote address pool 10 //在虚模板视图下指定为用户分配IP 的地址池

[H3C-Virtual-Template0]ip address 10.1.1.1 24

[H3C-Virtual-Template0] ppp ipcp dns 219.141.140.10 114.114.114.114 配置DNS [H3C-Virtual-Template0]quit

5.创建并配置L2TP组

[H3C]l2tp-group 1 mode lns