1台服务器做双出口NAT server的配置.doc

这里使用的AR46-20做的实验，所有中低端路由器都可以这样做。 1台服务器做双出口NAT server的配置 用户的server只有一块网卡，要求在AR46-20上e0/0/0接口连接网通，e0/0/1接口连接电信，在两个接口上都要做nat server指向内网的服务器。 要实现用户的需求必须要保证在e0/0/0接口进入的访问服务器的外网报文要能从e0/0/0口返回给外网，在e0/0/1接口进入的访问服务器的外网报文要能从e0/0/1口返回给外网。所以在服务器的一块网卡上要配置两个ip地址，在路由器连接服务器的接口上必须要配置策略路由才能实现。具体的配置信息如下： NATdis ver Copyright Notice: All rights reserved (Aug 17 2005). Without the owners prior written consent, no decompiling nor reverse-engineering shall be allowed. Huawei-3Com Versatile Routing Platform Software VRP(R) software, Version 3.40, Release RT-0013 Copyright (c) 2003-2005 Hangzhou Huawei-3Com Tech. Co.,Ltd. All rights reserved. Copyright (c) 2000-2003 Huawei Tech. Co.,Ltd. All rights reserved. Quidway AR46-20 uptime is 0 week, 0 day, 1 hour, 25 minutes Rpus version information: Router AR46-20 with 1 PowerPC 750 Processor 256M bytes SDRAM 32M bytes FLASH 512K bytes NVRAM Pcb Version : RTM1RPUA.2 RPE Logic Version : RPE3.4 SBG Logic Version : 012 Small BootROM Version : 3.07 Big BootROM Version : 5.14 Config Register points to FLASH [SLOT 0] AUX0 (Hardware)A.2, (Driver)1.0, (Cpld)3.4 [SLOT 0] ETH0 (Hardware)A.2, (Driver)1.0, (Cpld)3.4 [SLOT 0] ETH1 (Hardware)A.2, (Driver)1.0, (Cpld)3.4 [SLOT 1] 2FE (Hardware)2.1, (Driver)2.0, (Cpld)0.0 [SLOT 2] E1VI (Hardware)1.0, (Driver)2.7, (Cpld)1.0 NATdis cur # sysname NAT # FTP server enable # l2tp domain suffix-separator @ # radius scheme system # domain system # local-user admin password cipher .]@USE=B,53Q=^Q`MAF4TX$_S#6.NM(0=0\)*5WWQ=^Q`MAF4TX$_S#6.N service-type telnet terminal level 3 service-type ftp # controller E1 2/0/0 using e1 # interface Aux0 async mode flow # interface Ethernet0/0/0 ip address nat server protocol icmp global inside # interface Ethernet0/0/1 ip address nat server protocol icmp global inside # interface Ethernet1/0/0 ip address ip address sub ip policy route-policy nat # interface Ethernet1/0/1 ip address dhcp