出口路由器配置案例

?NPE#sh run

Building configuration...
Current configuration : 2590 bytes

!
version RGOS 10.3(4), Release(52974)(Wed Mar 25 17:31:06 CST 2009 -ngcf32)
hostname
!
!
!
!
!
!
!
!
username test password 7 093b10013345
service password-encryption
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
ip access-list standard 1
10 permit 172.16.0.0 0.0.255.255
!
!
!
control-plane
!
control-plane protocol
no acpp
!
control-plane manage
no port-filter
no arp-car
no acpp
!
control-plane data
no glean-car
no acpp
!
!
enable password 7 1014162a0c1c53043b1a22
!
!
!
!
!
!
!
interface gigabitEthernet 0/0
ip nat outside
ip ref
ip address X.X.X.X 255.255.255.248
duplex auto
speed auto
description Link-连接到电信
!
interface gigabitEthernet 0/1
ip nat inside
ip ref
ip address 192.168.3.1 255.255.255.248
duplex auto
speed auto
description Link-连接到流量控制ACE2000
!
interface gigabitEthernet 0/2
duplex auto
speed auto
!
!
ip nat pool zjzz prefix-length 29
address X.X.X.X X.X.X.X match interface gigabitEthernet 0/0
!
ip nat inside source static tcp 172.16.1.100 3389 X.X.X.X 3390 permit-inside
ip nat inside source static tcp 172.16.1.52 8081 X.X.X.X 8081 permit-inside
ip nat inside source static tcp 172.16.1.52 22 X.X.X.X 22 permit-inside
ip nat inside source static tcp 172.16.1.52 80 X.X.X.X 80 permit-inside
ip nat inside source static tcp 172.16.1.56 65422 X.X.X.X 65422 permit-inside
ip nat inside source static tcp 172.16.1.55 3389 X.X.X.X 3389 permit-inside
ip nat inside source static tcp 172.16.1.55 443 X.X.X.X 443 permit-inside
ip nat inside source static tcp 172.16.1.55 7000 X.X.X.X 7000 permit-inside
ip nat inside source static tcp 172.16.1.55 7001 X.X.X.X 7001 permit-inside
ip nat inside source static tcp 172.16.1.55 8000 X.X.X.X 8000 permit-inside
ip nat inside source static tcp 172.16.1.55 8080 X.X.X.X 8080 permit-inside
ip nat inside source static tcp 172.16.1.55 8088 X.X.X.X 8088 permit-inside
ip nat inside source static tcp 172.16.1.100 8080 X.X.X.X 8081 permit-inside
ip nat inside source static 172.16.1.111 X.X.X.X permit-inside
ip nat inside source list 1 pool zjzz overload
!
!
!
!
!
!
!
ip route 0.0.0.0 0.0.0.0 119.60.12.17
ip route 172.16.0.0 255.255.0.0 192.168.3.4
!
!
snmp-server host 172.16.1.103 traps version 2c zjzx_rw
ref parameter 50 140
line con 0
line aux 0
line vty 0 4
login
password 7 0121474e3e161f3719271c
!
!
en