DNAT负载均衡功能配置案例

1、DNAT:外网->0192.1680.20->0DNAT负载均衡功能配置案例DNAT负载均衡功能配置案例(设置内网服务器对互联网提供服务)拓扑图如附件所示。需求说明：内网有三台http服务器(192.16822/3/4)要对外提供服务，使用的外网口地址是，需对外提供负载均衡的功能。后续准备还要增加邮件、ftp等服务器。同时,允许这些服务器能够方便在家休息时的网管人员能管理远程的服务器。具体配置如下：address"cluster1"

2、rangehost""host""host""exitservice"rdp"tcpdst-port3389timeout1800exitinterfacevswitchif1zone"trust"ipaddressmanagesshmanagepingmanagehttpmanagehttpsexitinterfaceethernet0/

3、1zone"untrust"ipaddress1managesshmanagepingmanagehttpsexitipvroutertrust-vriproute/0exitpolicyfrom"trust"to"untrust"ruleid2actionpermitsrc-addr"Any"dst-addr"Any"service"Any"exitexitpolicyfrom"u

4、ntrust"to"trust"ruleid3actionpermitsrc-addr"Any"dst-addr"Any"service"HTTP"service"FTP"service"POP3"service"PING"service"SMTP"service"rdp"service"ICMP"exitpolicyfrom"l2-trust"to"l2-

5、trust"ruleid4actionpermitsrc-addr"Any"dst-addr"Any"service"Any"exitnatsnatruleid1from"cluster1"to"Any"eifethernet0/1trans-toaddress-book"0"modedynamicportstickyexitnatsnatruleid2from"Any"to"Any"eifetherne

6、t0/1trans-toeif-ipmodedynamicportstickyexitnatdnatruleid2from"Any"to"0"service"PING"trans-to""load-balancetrack-pingexitnatdnatruleid1from"Any"to"0"service"HTTP"trans-to""load-

7、balancetrack-pingexitnatdnatruleid4from"Any"to"0"service"rdp"trans-to""load-balancetrack-pingexitnatdnatruleid3from"Any"to"0"service"PING"trans-to""load-balancetrack-pingexitna

8、tdnatruleid5from"Any"to"0"service"HTTP"trans-to""load-balancetrack-pingexitnatdnatruleid6from"Any"to"0"service"rdp"trans-to""load-balancetrack-pingexitnatdnatruleid7from"Any"to"0"service"PING"trans-to""load-balancetrack-pingexitnatdnatruleid8from"Any"to"0"service"HTTP"trans-to""load-balancetrack-pingexi