H3C路由器3链路负载，并实现访问内网服务器

 



组网图如上，

需求：1。要求实现外网访问内网服务器 2.用户优先通过G4/0接口90M接口出网  3.财务部电脑独立使用G3/0的10M流量

            4.G2/0接口的流量采用备份链路

环境：路由器型号 H3C AR1863  财务部主机：10.0.10.10  10.0.10.11

           g1/0 地址：10.0.10.254/22      G2/0 地址 100.100.100.1    G3/0地址 100.100.200.1 G4/0地址 100.100.120.1

           服务器映射地址  100.100.100.100   内网地址：10.0.10.100

 

R1配置：

            

system

sysname R1

#

interface GigabitEthernet1/0

 ip address 10.0.10.254 255.255.252.0

ip policy route-policy 123  >>>--- 策略应用

#

interface GigabitEthernet2/0

 description EDU

 ip address 100.100.100.1 255.255.255.252

 nat outbound 2000

 nat server protocol tcp global 100.100.100.100 inside 10.0.10.100

#

interface GigabitEthernet3/0

 ip address 100.100.200.1 255.255.255.252

nat outbound 3010

#

interface GigabitEthernet4/0

 ip address 100.100.120.1 255.255.255.0

nat outbound 3011

#

acl number 2000

 rule 0 permit source 10.0.0.0 0.255.255.255

--------------------------------- EDU接口应用

#

acl number 3010

 rule 0 permit ip source 10.0.10.10 0

 rule 1 permit ip source 10.0.10.11 0

rule 8 dny ip   ------------------------------  10M移动接口应用

acl number 3011

 rule 0 deny ip source 10.0.10.10 0

 rule 1 deny ip source 10.0.10.11 0

 rule 2 deny ip source 10.0.10.100 0

 rule 3permit ip ------------------------------  90M接口应用

acl number 3014

 rule 0 permit ip source 10.0.10.100 0

#

route-policy 123 permit node 1

 if-match acl 3010

 apply ip-address next-hop 100.100.100.2

#

route-policy 123 permit node 2

 if-match acl 3014

 apply ip-address next-hop 100.100.200.2

route-policy 123 permit node 5

 if-match acl 3011

 apply ip-address next-hop 100.100.120.2   >>>>----应用到内网口

 

-------------------------------------------------------telnet 用户名 权限

local-user ****

 password cipher &O!![)a(M*7Aa^$&\4"1PQ!!

 service-type telnet terminal

 level 3

user-interface vty 0 4

 authentication-mode scheme

#

---------------------------------------------------------------------------------#

#

 FTP server enable   FTP服务启动

#

 dhcp server forbidden-ip 58.131.159.254  DHCP保留地址

#                                        

 ip route-static 0.0.0.0 0.0.0.0 100.100.120.2 preference 60

 ip route-static 0.0.0.0 0.0.0.0 100.100.200.2 preference 60

 ip route-static 0.0.0.0 0.0.0.0 100.100.100.2 preference 80

#---------------------------静态路由表