H3C双WAN口负载均衡限速实例MSR5006.doc

实用标准文案 精彩文档 [H3C] [H3C] [H3C] [H3C]dis cur # version 5.20, ESS 1807 # sysname H3C # firewall enable # nat aging-time tcp 280 nat aging-time udp 180 nat aging-time icmp 11 nat aging-time pptp 290 nat aging-time dns 11 nat aging-time ftp-ctrl 290 nat aging-time tcp-fin 11 nat aging-time tcp-syn 11 # undo radius client # domain default enable system # dns resolve dns server 66 dns server 6 # telnet server enable # dar p2p signature-file flash:/p2p_default.mtd # qos carl 1 source-ip-address range to 53 per-address qos carl 2 source-ip-address range to 53 per-address qos carl 3 destination-ip-address range to 53 per-address qos carl 4 destination-ip-address range to 53 per-address # ip flow-ordering enable # acl number 2000 rule 1 permit source 55 rule 2 deny # acl number 3101 rule 0 permit ip source 55 rule 1 permit ip source 55 rule 2 permit ip source 55 rule 3 deny ip acl number 3102 rule 0 permit ip source 55 rule 1 permit ip source 55 rule 2 permit ip source 55 rule 3 permit ip source 55 rule 4 deny ip # vlan 1 # radius scheme system # domain system access-limit disable state active idle-cut disable self-service-url disable # dhcp server ip-pool vlan1 extended network mask # user-group system # local-user admin password simple admin authorization-attribute level 1 service-type telnet local-user msr5006 password cipher La%FFS+AJ=6L8FL=^WJQ!! authorization-attribute level 3 service-type telnet # interface Aux0 async mode flow link-protocol ppp # interface Virtual-Ethernet1 # interface NULL0 # interface Vlan-interface1 ip address # interface GigabitEthernet0/1 port link-mode route nat outbound 2000 nat server protocol tcp global 8080 inside 10 8080 nat server protocol tcp global 7500 inside 10 7500 ip address 52 tcp mss 1024 # interface GigabitEthernet0/2 port link-mode route nat outbound 2000 nat server protocol tcp global 8080 inside 10 8080 nat server protocol tcp global 7500 inside 10 8