求助!!!!!!!!!!!
下面是移动光纤里面的配置文件,我想用ros替代这个路由器,请问大侠们该怎么配置呢?service timestamps log date
service timestamps debug date
no service password-encryption
!
hostname zhongxue
ixpset wan 2
no mirror-ports
!
!
!
!
gbsc group default
!
!
no gbsc filter-url enable
gbsc filter-url mode forbid
no gbsc filter-key enable
!
arp 192.168.2.10 00:1d:7d:10:5e:44
!
!
!
!
aaa authentication login default local-case
aaa authentication enable default none
aaa authentication ppp default local
aaa authorization network bindip local
!
username xxxxx password 0 xxxxx
!
!
!
!
!
!
interface Loopback0
ip address 223.100.xxx.xxx 255.255.255.255
no ip directed-broadcast
ip http firewalltype 0
!
interface FastEthernet0/0
ip address 10.62.200.114 255.255.255.252
no ip directed-broadcast
ip transportaccess deny icmp
ip nat outside
ip fast-switch enable
ip http firewalltype 0
!
interface FastEthernet0/1
ip address 10.0.1.1 255.255.255.0
no ip directed-broadcast
ip transportaccess deny icmp
ip nat inside
ip fast-switch enable
ip http firewalltype 0
!
interface FastEthernet0/2
ip address 192.168.2.1 255.255.255.0
no ip directed-broadcast
arp scan
arp free-arp 20000
ip nat inside
ip fast-switch enable
ip http firewalltype 0
!
!
!
ip route default 10.62.xxx.xxx
!
snmp-server community LNJk2011 RO
snmp-server host 211.137.32.212 LNJk2011 authentication configure snmp
snmp-server trap-source Loopback0
snmp-server source-addr 223.100.xxx.xxx
!
ip access-list standard 1
permit 10.0.1.1 255.255.255.0
!
ip access-list extended NAT_WAN0_LIST
!
ip access-list extended NAT_WAN1_LIST
!
ip access-list extended dmz
permit tcp 10.0.1.254 255.255.255.255 src_portrange 20 21 any
permit tcp 10.0.1.254 255.255.255.255 eq 9716 any
permit tcp 10.0.1.254 255.255.255.255 eq 3389 any
!
!
!
vpdn enable
!
!
ip dhcpd pool dpool
network 192.168.2.0 255.255.255.0
range 192.168.2.10 192.168.2.255
default-router 192.168.2.1
dns-server 211.137.32.178
lease infinite
!
ip dhcpd pool 1
network 10.0.1.0 255.255.255.0
range 10.0.1.2 10.0.1.254
default-router 10.0.1.1
dns-server 211.137.32.178 211.136.17.107
!
ip dhcpd enable
!
ip http ispmode 1
ip http server
ip http port 8080
ip http language chinese
no ip http limit-outside enable
ip http timeout 10
ip http set-name-value 0
!
!
两个内网口都开了DHCP服务,两个内网段没有伪装出去,是直接路由上去的。这些先配置好。
其他的就慢慢配置吧,例如SNMP、过滤规则、ARP绑定等。
新手小白,不懂啊:@:)
页:
[1]