博达模块化路由器常用配置(2621为例)文.pdfVIP

博达模块化路由器常用配置（ 2621 为例） 静态端口映射和特殊 NAT ： Router_config#show run Building configuration... Current configuration: ! !version 1.3.1Q service timestamps log date service timestamps debug date no service password-encryption ! username bdcom password 0 bdcom ! interface Dialer0 ip address negotiated ip mtu 1492 no ip directed-broadcast ppp pap sent-username 1111111 22222 ip nat outside ip nat mss ip nat local-service icmp enable ip nat local-service udp enable ip nat local-service tcp enable ! interface FastEthernet0/0 no ip address no ip directed-broadcast pppoe-client Dialer 0 ! interface FastEthernet0/1 ip address no ip directed-broadcast ip access-group firewall in ip nat inside ! interface Async0/0 no ip address no ip directed-broadcast ! ! ip route default Dialer0 ! ! gateway-cfg Gateway keepAlive 60 shutdown ip access-list standard NAT permit ip access-list extended firewall deny tcp any any eq 135 deny tcp any any eq 139 deny tcp any any eq 445 deny tcp any any eq 3333 deny tcp any any eq 593 deny udp any any eq 135 deny udp any any eq tftp deny udp any any eq 4444 deny udp any any eq 137 deny udp any any eq 138 permit ip any any ivr-cfg ip nat service privateservice // 特殊 NAT 使能开关； ip nat translation max-links all 300 ip nat outside destination static interface Dialer0 00 // 开启局域网内某 PC/ip 地址的特殊 NAT 服务； ip nat inside source static tcp 00 80 interface Dialer0 80 ip nat inside source static tcp 00 20 interface Dialer0 20 ip nat inside source static tcp 00 21 interface Dialer0 21 //将局域网内某 PC 的 80/20/21 端口映射到公网上！ ip nat inside source list NAT interface FastEthernet0/0 ! ! 说明： 1、如果公网 ip 想（通过公网 ip/ 路由器外网口 ip ）连 接到局域网的私网 ip 上，只需要在正常 NAT 的基础上加上 静态端口映射即可！ 如，开放 http 服务是： ip nat inside sourc