局域网内的一台机器为192.168.0.2我需要把公网IP口上的7001映射到局域网内的这台机器上7001上。我该用什么命令。?
路由配置如下:
Current configuration : 2573 bytes
!
version 12.2
service timestamps debug datetime msec
service timestamps log datetime msec
no service password-encryption
!
hostname Router
!
enable secret 5 $1$M9Xb$Z2Kr5Ekc52myQtTbztkpa.
!
memory-size iomem 10
ip subnet-zero
!
!
!
!
crypto isakmp policy 1
hash md5
authentication pre-share
crypto isakmp key cisco address 0.0.0.0 0.0.0.0
crypto isakmp client configuration address-pool local zdgjpool
crypto ipsec transform-set myset esp-des esp-md5-hmac
!
crypto dynamic-map vigor 10
set transform-set myset
match address 110
crypto dynamic-map vigor 20
set transform-set myset
match address 111
crypto dynamic-map vigor 30
set transform-set myset
match address 112
!
!
crypto map zdgjtrans client configuration address initiate
crypto map zdgjtrans client configuration address respond
crypto map zdgjtrans 10 ipsec-isakmp dynamic vigor
!
!
!
voice call carrier capacity active
mta receive maximum-recipients 0
!
!
!
!
interface FastEthernet0/0
ip address 218.78.219.122 255.255.255.252
ip nat outside
duplex auto
speed auto
crypto map zdgjtrans
!
interface FastEthernet0/1
no ip address
shutdown
duplex auto
speed auto
!
interface Ethernet1/0
ip address 192.168.0.1 255.255.255.0
ip nat inside
half-duplex
!
ip local pool zdgjpool 192.168.10.1 192.168.10.254
ip nat inside source list 101 interface FastEthernet0/0 overload
ip nat inside source static tcp 192.168.0.5 1433 interface FastEthernet0/0 1433
ip nat inside source static tcp 192.168.0.5 1434 interface FastEthernet0/0 1434
ip nat inside source static tcp 192.168.0.5 4587 interface FastEthernet0/0 4587
ip classless
ip route 0.0.0.0 0.0.0.0 FastEthernet0/0
ip http server
!
!
access-list 101 deny ip 192.168.0.0 0.0.0.255 172.19.1.0 0.0.0.255
access-list 101 deny ip 192.168.0.0 0.0.0.255 172.19.2.0 0.0.0.255
access-list 101 deny ip 192.168.0.0 0.0.0.255 172.19.3.0 0.0.0.255
access-list 101 deny ip 192.168.0.0 0.0.0.255 172.19.4.0 0.0.0.255
access-list 101 deny ip 192.168.0.0 0.0.0.255 172.19.5.0 0.0.0.255
access-list 101 deny ip 192.168.0.0 0.0.0.255 172.19.6.0 0.0.0.255
access-list 101 permit ip 192.168.0.0 0.0.0.255 any
access-list 110 permit ip 192.168.0.0 0.0.0.255 172.19.1.0 0.0.0.255
access-list 111 permit ip 192.168.0.0 0.0.0.255 172.19.2.0 0.0.0.255
access-list 110 permit ip 192.168.0.0 0.0.0.255 172.19.1.0 0.0.0.255
access-list 111 permit ip 192.168.0.0 0.0.0.255 172.19.2.0 0.0.0.255
access-list 112 permit ip 192.168.0.0 0.0.0.255 172.19.3.0 0.0.0.255
access-list 113 permit ip 192.168.0.0 0.0.0.255 172.19.4.0 0.0.0.255
!
call rsvp-sync
!
!
mgcp profile default
!
dial-peer cor custom
