蓝森林首页 | 返回主页 | 本站地图 | 站内搜索 | 联系信箱 |
 您目前的位置:首页 > 自由软件 > 技术交流 > 网络通讯


    

蓝森林 http://www.lslnet.com 2006年7月26日 13:28

cisco端口映射问题


比如公网ip为218.16.17.55
局域网内的一台机器为192.168.0.2我需要把公网IP口上的7001映射到局域网内的这台机器上7001上。我该用什么命令。?
路由配置如下:
Current configuration : 2573 bytes
!
version 12.2
service timestamps debug datetime msec
service timestamps log datetime msec
no service password-encryption
!
hostname Router
!
enable secret 5 $1$M9Xb$Z2Kr5Ekc52myQtTbztkpa.
!
memory-size iomem 10
ip subnet-zero
!
!
!
!
crypto isakmp policy 1
hash md5
authentication pre-share
crypto isakmp key cisco address 0.0.0.0 0.0.0.0
crypto isakmp client configuration address-pool local zdgjpool

crypto ipsec transform-set myset esp-des esp-md5-hmac
!
crypto dynamic-map vigor 10
set transform-set myset
match address 110
crypto dynamic-map vigor 20
set transform-set myset
match address 111
crypto dynamic-map vigor 30
set transform-set myset
match address 112
!
!
crypto map zdgjtrans client configuration address initiate
crypto map zdgjtrans client configuration address respond
crypto map zdgjtrans 10 ipsec-isakmp dynamic vigor
!
!
!
voice call carrier capacity active

mta receive maximum-recipients 0
!
!
!
!
interface FastEthernet0/0
ip address 218.78.219.122 255.255.255.252
ip nat outside
duplex auto
speed auto
crypto map zdgjtrans
!
interface FastEthernet0/1
no ip address
shutdown
duplex auto
speed auto
!
interface Ethernet1/0
ip address 192.168.0.1 255.255.255.0
ip nat inside
half-duplex
!
ip local pool zdgjpool 192.168.10.1 192.168.10.254
ip nat inside source list 101 interface FastEthernet0/0 overload
ip nat inside source static tcp 192.168.0.5 1433 interface FastEthernet0/0 1433
ip nat inside source static tcp 192.168.0.5 1434 interface FastEthernet0/0 1434
ip nat inside source static tcp 192.168.0.5 4587 interface FastEthernet0/0 4587
ip classless
ip route 0.0.0.0 0.0.0.0 FastEthernet0/0
ip http server
!
!
access-list 101 deny ip 192.168.0.0 0.0.0.255 172.19.1.0 0.0.0.255
access-list 101 deny ip 192.168.0.0 0.0.0.255 172.19.2.0 0.0.0.255
access-list 101 deny ip 192.168.0.0 0.0.0.255 172.19.3.0 0.0.0.255
access-list 101 deny ip 192.168.0.0 0.0.0.255 172.19.4.0 0.0.0.255
access-list 101 deny ip 192.168.0.0 0.0.0.255 172.19.5.0 0.0.0.255
access-list 101 deny ip 192.168.0.0 0.0.0.255 172.19.6.0 0.0.0.255
access-list 101 permit ip 192.168.0.0 0.0.0.255 any
access-list 110 permit ip 192.168.0.0 0.0.0.255 172.19.1.0 0.0.0.255
access-list 111 permit ip 192.168.0.0 0.0.0.255 172.19.2.0 0.0.0.255
access-list 110 permit ip 192.168.0.0 0.0.0.255 172.19.1.0 0.0.0.255
access-list 111 permit ip 192.168.0.0 0.0.0.255 172.19.2.0 0.0.0.255
access-list 112 permit ip 192.168.0.0 0.0.0.255 172.19.3.0 0.0.0.255
access-list 113 permit ip 192.168.0.0 0.0.0.255 172.19.4.0 0.0.0.255
!
call rsvp-sync
!
!
mgcp profile default
!
dial-peer cor custom

就没人知道这个问题吗?。。。。。。。

ip nat inside source static tcp 192.168.0.2 7001 218.16.17.55 7001


Copyright © 1999-2000 LSLNET.COM. All rights reserved. 蓝森林网站 版权所有。 E-mail : webmaster@lslnet.com