USG产品基本功能特性与配置.ppt

* Page* NAT Server典型配置 [USG2100]nat server global 0 inside 00 [USG2100]nat server protocol tcp global 1 80 inside 01 8080 [USG2100] nat server protocol tcp global 2 1021 inside 02 ftp [USG2100]policy interzone dmz untrust inbound [USG2100-policy-interzone-dmz-untrust-inbound]policy 1 [USG2100-policy-interzone-dmz-untrust-inbound-1]policy destination mask 24 [USG2100-policy-interzone-dmz-untrust-inbound-1]policy service service-set ftp [USG2100-policy-interzone-dmz-untrust-inbound-1]action deny 配置全局地址与内部服务器地址的映射关系 Page* NAT配置验证 [USG2100]display nat-policy all nat-policy interzone trust un