华三三层交换机nat配置(华为交换机三层配置命令)

配置IP地址池1，包括两个公网地址202.38.1.2和202.38.1.3。

lt;Routergt; system-view

[Router] nat address-group 1 202.38.1.2 202.38.1.3

# 配置访问控制列表2001，仅允许内部网络中10.110.10.024网段的用户可以访问Internet。

[Router] acl number 2001

[Router-acl-basic-2001] rule permit source 10.110.10.0 0.0.0.255

[Router-acl-basic-2001] rule deny

[Router-acl-basic-2001] quit

# 在出接口GigabitEthernet12上配置ACL 2001与IP地址池1相关联。

[Router] interface gigabitethernet 12

[Router-GigabitEthernet12] ip address 202.38.1.4 24

[Router-GigabitEthernet12] nat outbound 2001 (可有可无)address-group 1

[Router-GigabitEthernet12] quit