DNAT負(fù)載均衡功能配置案例

1、DNAT:外網(wǎng)->0192.1680.20->0DNAT負(fù)載均衡功能配置案例DNAT負(fù)載均衡功能配置案例(設(shè)置內(nèi)網(wǎng)服務(wù)器對(duì)互聯(lián)網(wǎng)提供服務(wù))拓?fù)鋱D如附件所示。需求說(shuō)明：內(nèi)網(wǎng)有三臺(tái)http服務(wù)器(192.16822/3/4)要對(duì)外提供服務(wù)，使用的外網(wǎng)口地址是，需對(duì)外提供負(fù)載均衡的功能。后續(xù)準(zhǔn)備還要增加郵件、ftp等服務(wù)器。同時(shí),允許這些服務(wù)器能夠方便在家休息時(shí)的網(wǎng)管人員能管理遠(yuǎn)程的服務(wù)器。具體配置如下：address"cluster1"

2、rangehost""host""host""exitservice"rdp"tcpdst-port3389timeout1800exitinterfacevswitchif1zone"trust"ipaddressmanagesshmanagepingmanagehttpmanagehttpsexitinterfaceethernet0/

3、1zone"untrust"ipaddress1managesshmanagepingmanagehttpsexitipvroutertrust-vriproute/0exitpolicyfrom"trust"to"untrust"ruleid2actionpermitsrc-addr"Any"dst-addr"Any"service"Any"exitexitpolicyfrom"u

4、ntrust"to"trust"ruleid3actionpermitsrc-addr"Any"dst-addr"Any"service"HTTP"service"FTP"service"POP3"service"PING"service"SMTP"service"rdp"service"ICMP"exitpolicyfrom"l2-trust"to"l2-

5、trust"ruleid4actionpermitsrc-addr"Any"dst-addr"Any"service"Any"exitnatsnatruleid1from"cluster1"to"Any"eifethernet0/1trans-toaddress-book"0"modedynamicportstickyexitnatsnatruleid2from"Any"to"Any"eifetherne

6、t0/1trans-toeif-ipmodedynamicportstickyexitnatdnatruleid2from"Any"to"0"service"PING"trans-to""load-balancetrack-pingexitnatdnatruleid1from"Any"to"0"service"HTTP"trans-to""load-

7、balancetrack-pingexitnatdnatruleid4from"Any"to"0"service"rdp"trans-to""load-balancetrack-pingexitnatdnatruleid3from"Any"to"0"service"PING"trans-to""load-balancetrack-pingexitna

8、tdnatruleid5from"Any"to"0"service"HTTP"trans-to""load-balancetrack-pingexitnatdnatruleid6from"Any"to"0"service"rdp"trans-to""load-balancetrack-pingexitnatdnatruleid7from"Any"to"0"service"PING"trans-to""load-balancetrack-pingexitnatdnatruleid8from"Any"to"0"service"HTTP"trans-to""load-balancetrack-pingexi