DNAT負載均衡功能配置案例

1、DNAT:外網(wǎng)->0192.1680.20->0DNAT負載均衡功能配置案例DNAT負載均衡功能配置案例(設置內網(wǎng)服務器對互聯(lián)網(wǎng)提供服務)拓撲圖如附件所示。需求說明：內網(wǎng)有三臺http服務器(192.16822/3/4)要對外提供服務，使用的外網(wǎng)口地址是，需對外提供負載均衡的功能。后續(xù)準備還要增加郵件、ftp等服務器。同時,允許這些服務器能夠方便在家休息時的網(wǎng)管人員能管理遠程的服務器。具體配置如下：address"cluster1"

2、rangehost""host""host""exitservice"rdp"tcpdst-port3389timeout1800exitinterfacevswitchif1zone"trust"ipaddressmanagesshmanagepingmanagehttpmanagehttpsexitinterfaceethernet0/

3、1zone"untrust"ipaddress1managesshmanagepingmanagehttpsexitipvroutertrust-vriproute/0exitpolicyfrom"trust"to"untrust"ruleid2actionpermitsrc-addr"Any"dst-addr"Any"service"Any"exitexitpolicyfrom"u

4、ntrust"to"trust"ruleid3actionpermitsrc-addr"Any"dst-addr"Any"service"HTTP"service"FTP"service"POP3"service"PING"service"SMTP"service"rdp"service"ICMP"exitpolicyfrom"l2-trust"to"l2-

5、trust"ruleid4actionpermitsrc-addr"Any"dst-addr"Any"service"Any"exitnatsnatruleid1from"cluster1"to"Any"eifethernet0/1trans-toaddress-book"0"modedynamicportstickyexitnatsnatruleid2from"Any"to"Any"eifetherne

6、t0/1trans-toeif-ipmodedynamicportstickyexitnatdnatruleid2from"Any"to"0"service"PING"trans-to""load-balancetrack-pingexitnatdnatruleid1from"Any"to"0"service"HTTP"trans-to""load-

7、balancetrack-pingexitnatdnatruleid4from"Any"to"0"service"rdp"trans-to""load-balancetrack-pingexitnatdnatruleid3from"Any"to"0"service"PING"trans-to""load-balancetrack-pingexitna

8、tdnatruleid5from"Any"to"0"service"HTTP"trans-to""load-balancetrack-pingexitnatdnatruleid6from"Any"to"0"service"rdp"trans-to""load-balancetrack-pingexitnatdnatruleid7from"Any"to"0"service"PING"trans-to""load-balancetrack-pingexitnatdnatruleid8from"Any"to"0"service"HTTP"trans-to""load-balancetrack-pingexi