{"id":11045,"date":"2025-04-18T18:23:45","date_gmt":"2025-04-18T10:23:45","guid":{"rendered":"https:\/\/www.wsisp.com\/helps\/11045.html"},"modified":"2025-04-18T18:23:45","modified_gmt":"2025-04-18T10:23:45","slug":"%e3%80%90%e5%8d%8e%e4%b8%baensp%e9%98%b2%e7%81%ab%e5%a2%99%e3%80%91%e5%8f%8c%e6%9c%ba%e7%83%ad%e5%a4%87nat%e5%a4%96%e7%bd%91%e8%ae%bf%e9%97%ae%e5%86%85%e9%83%a8%e6%9c%8d%e5%8a%a1%e5%99%a8%ef%bc%88ht","status":"publish","type":"post","link":"https:\/\/www.wsisp.com\/helps\/11045.html","title":{"rendered":"\u3010\u534e\u4e3aensp\u9632\u706b\u5899\u3011\u53cc\u673a\u70ed\u5907+NAT+\u5916\u7f51\u8bbf\u95ee\u5185\u90e8\u670d\u52a1\u5668\uff08http\u3001ftp\uff09"},"content":{"rendered":"<h2>\u9632\u706b\u5899\u7406\u8bba&#xff1a;<\/h2>\n<p> 1\u3001\u8def\u7531\u3001\u900f\u660e\u3001\u6df7\u5408 2\u3001\u533a\u57df&#xff1a;Local\u3001Trust\u3001Dmz\u3001Untrust 3\u3001\u5b89\u5168\u7b56\u7565&#xff0c;\u533a\u57df\u64cd\u4f5c&#xff0c;IP \u00a0 \u00a0\u6761\u4ef6\u3001\u64cd\u4f5c\u3001\u914d\u7f6e\u6587\u4ef6&#xff08;\u6839\u636e\u73b0\u4eca\u60c5\u51b5&#xff0c;\u53e6\u5916\u7684\u5b89\u5168\u4ea7\u54c1\u66ff\u4ee3&#xff09; \u00a0 \u00a0NAT\u7b56\u7565&#xff1a;\u6e90\u5730\u5740\u3001\u76ee\u7684\u5730\u5740\u3001\u53cc\u5411 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u9759\u6001\u3001\u52a8\u6001\u3001NAPT\u3001Easy-IP \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 Nat Server<\/p>\n<h2>\u53cc\u673a\u70ed\u5907&#043;NAT&#043;\u5916\u7f51\u8bbf\u95ee\u5185\u90e8\u670d\u52a1\u5668\u5b9e\u9a8c\u8981\u6c42&#xff1a;<\/h2>\n<p> 1\u3001PC1\u3001Server \u6a21\u62df\u5185\u7f51\u8bbe\u5907&#xff0c;\u4f4d\u4e8e\u9632\u706b\u5899\u7684Trust\u533a\u57df&#xff1b; 2\u3001Client1\u6a21\u62dfInternet&#xff0c;\u4f4d\u4e8e\u9632\u706b\u5899\u7684Untrust\u533a\u57df&#xff1b; 3\u3001\u9632\u706b\u5899\u90e8\u7f72\u53cc\u673a\u70ed\u5907&#xff0c;\u5de5\u4f5c\u65b9\u5f0f\u4e3a\u4e3b\u5907&#xff0c;\u6b63\u5e38\u60c5\u51b5\u4e0bFW1\u4e3a\u4e3b&#xff0c;FW2\u4e3a\u5907&#xff1b; 4\u3001\u8981\u6c42PC1\u80fd\u591f\u8bbf\u95ee\u4f4d\u4e8e\u5916\u7f51\u7684PC2&#xff0c;\u5e76\u4e14\u8bbf\u95ee\u65f6\u9700\u8fdb\u884cNAT\u6e90\u5730\u5740\u8f6c\u6362&#xff0c; \u4f7f\u7528\u7684\u5730\u5740\u6c60\u533a\u95f4\u662f200.1.1.10\u81f3200.1.1.20&#xff1b;PC2\u80fd\u591f\u4ee5200.1.1.29\u4e3a\u76ee\u7684\u5730\u5740\u8bbf\u95eeServer\u7684FTP\u670d\u52a1 5\u3001\u8981\u6c42Client1\u8bbf\u95eeDMZ\u533a\u57dfServer3 HTTP\u670d\u52a1&#xff0c;\u4ee5200.1.1.100\u4e3a\u76ee\u7684\u5730\u5740<\/p>\n<p>\u4ee5\u4e0b\u662f\u62d3\u6251\u56fe&#xff1a;<\/p>\n<p><img loading=\"lazy\" decoding=\"async\" alt=\"\" height=\"1040\" src=\"https:\/\/www.wsisp.com\/helps\/wp-content\/uploads\/2025\/04\/20250418102340-6802282c0520c.png\" width=\"1200\" \/><\/p>\n<h2 style=\"margin-left:0px;text-align:justify\">\u57fa\u7840\u914d\u7f6e&#xff1a;<\/h2>\n<p style=\"margin-left:0;text-align:justify\">FW1<\/p>\n<p style=\"margin-left:0;text-align:justify\">sys<\/p>\n<p style=\"margin-left:0;text-align:justify\">sysname FW1<\/p>\n<p style=\"margin-left:0;text-align:justify\">undo info en<\/p>\n<p style=\"margin-left:0;text-align:justify\">#VRRP\u914d\u7f6e&#xff0c;\u9488\u5bf9trust<\/p>\n<p style=\"margin-left:0;text-align:justify\">int g1\/0\/0<\/p>\n<p style=\"margin-left:0;text-align:justify\">ip add 192.168.1.253 24<\/p>\n<p style=\"margin-left:0;text-align:justify\">vrrp vrid 1 virtual-ip 192.168.1.254 24 active<\/p>\n<p style=\"margin-left:0;text-align:justify\">q<\/p>\n<p style=\"margin-left:0;text-align:justify\">#VRRP\u914d\u7f6e&#xff0c;\u9488\u5bf9untrust<\/p>\n<p style=\"margin-left:0;text-align:justify\">int g1\/0\/5<\/p>\n<p style=\"margin-left:0;text-align:justify\">ip add 200.1.1.3 24<\/p>\n<p style=\"margin-left:0;text-align:justify\">vrrp vrid 3 virtual-ip 200.1.1.1 24 active<\/p>\n<p style=\"margin-left:0;text-align:justify\">q<\/p>\n<p style=\"margin-left:0;text-align:justify\">int g1\/0\/6<\/p>\n<p style=\"margin-left:0;text-align:justify\">ip add 1.1.1.1 24<\/p>\n<p style=\"margin-left:0;text-align:justify\"><img loading=\"lazy\" decoding=\"async\" alt=\"\" height=\"480\" src=\"https:\/\/www.wsisp.com\/helps\/wp-content\/uploads\/2025\/04\/20250418102341-6802282d086dc.png\" width=\"1186\" \/><\/p>\n<p style=\"margin-left:0;text-align:justify\">#\u9632\u706b\u5899\u53cc\u673a\u70ed\u5907&#xff0c;\u65b0\u5efa\u533a\u57dfha<\/p>\n<p style=\"margin-left:0;text-align:justify\">firewall zone name ha<\/p>\n<p style=\"margin-left:0;text-align:justify\">set priority 99<\/p>\n<p style=\"margin-left:0;text-align:justify\">add interface g 1\/0\/6<\/p>\n<p style=\"margin-left:0;text-align:justify\">q<\/p>\n<p style=\"margin-left:0;text-align:justify\">firewall zone trust<\/p>\n<p style=\"margin-left:0;text-align:justify\">add interface g 1\/0\/0<\/p>\n<p style=\"margin-left:0;text-align:justify\">q<\/p>\n<p style=\"margin-left:0;text-align:justify\">firewall zone untrust<\/p>\n<p style=\"margin-left:0;text-align:justify\">add interface g 1\/0\/5<\/p>\n<p style=\"margin-left:0;text-align:justify\">q<\/p>\n<p style=\"margin-left:0;text-align:justify\"><img loading=\"lazy\" decoding=\"async\" alt=\"\" height=\"325\" src=\"https:\/\/www.wsisp.com\/helps\/wp-content\/uploads\/2025\/04\/20250418102341-6802282d46e51.png\" width=\"688\" \/><\/p>\n<p style=\"margin-left:0;text-align:justify\">FW2&#xff1a;<\/p>\n<p style=\"margin-left:0;text-align:justify\">sys<\/p>\n<p style=\"margin-left:0;text-align:justify\">sysname FW2<\/p>\n<p style=\"margin-left:0;text-align:justify\">undo info en<\/p>\n<p style=\"margin-left:0;text-align:justify\">#VRRP\u914d\u7f6e&#xff0c;\u9488\u5bf9trust<\/p>\n<p style=\"margin-left:0;text-align:justify\">int g1\/0\/0<\/p>\n<p style=\"margin-left:0;text-align:justify\">ip add 192.168.1.252 24<\/p>\n<p style=\"margin-left:0;text-align:justify\">vrrp vrid 1 virtual-ip 192.168.1.254 24 active<\/p>\n<p style=\"margin-left:0;text-align:justify\">q<\/p>\n<p style=\"margin-left:0;text-align:justify\">#VRRP\u914d\u7f6e&#xff0c;\u9488\u5bf9untrust<\/p>\n<p style=\"margin-left:0;text-align:justify\">int g1\/0\/5<\/p>\n<p style=\"margin-left:0;text-align:justify\">ip add 200.1.1.2 24<\/p>\n<p style=\"margin-left:0;text-align:justify\">vrrp vrid 3 virtual-ip 200.1.1.1 24 active\u3010active\u662f\u62a2\u5360\u5f0f&#xff0c;\u8fd9\u91cc\u4e5f\u53ef\u4ee5\u8bbe\u7f6estandy\u3011<\/p>\n<p style=\"margin-left:0;text-align:justify\">q<\/p>\n<p style=\"margin-left:0;text-align:justify\">int g1\/0\/6<\/p>\n<p style=\"margin-left:0;text-align:justify\">ip add 1.1.1.2 24<\/p>\n<p style=\"margin-left:0;text-align:justify\"><img loading=\"lazy\" decoding=\"async\" alt=\"\" height=\"272\" src=\"https:\/\/www.wsisp.com\/helps\/wp-content\/uploads\/2025\/04\/20250418102341-6802282d59015.png\" width=\"500\" \/><\/p>\n<p style=\"margin-left:0;text-align:justify\">hrp int g1\/0\/6 remote 1.1.1.2<\/p>\n<p style=\"margin-left:0;text-align:justify\">hrp enable<\/p>\n<p style=\"margin-left:0;text-align:justify\"><img loading=\"lazy\" decoding=\"async\" alt=\"\" height=\"105\" src=\"https:\/\/www.wsisp.com\/helps\/wp-content\/uploads\/2025\/04\/20250418102341-6802282daad65.png\" width=\"535\" \/><\/p>\n<p style=\"margin-left:0;text-align:justify\"><span style=\"color:#FF0000\">\u6211\u8fd9\u662f<\/span><span style=\"color:#FF0000\">FW1<\/span><span style=\"color:#FF0000\">\u662f\u4e3b&#xff08;<\/span><span style=\"color:#FF0000\">M<\/span><span style=\"color:#FF0000\">&#xff09;&#xff0c;<\/span><span style=\"color:#FF0000\">FW2<\/span><span style=\"color:#FF0000\">\u662f\u5907&#xff08;<\/span><span style=\"color:#FF0000\">S<\/span><span style=\"color:#FF0000\">&#xff09;<\/span><\/p>\n<p style=\"margin-left:0;text-align:justify\"><span style=\"color:#FF0000\">\u3010\u5982\u679c\u4f60\u7684\u4e3b\u5907\u673a\u548c\u6211\u7684\u4e0d\u4e00\u6837&#xff0c;\u5219\u662f\u56e0\u4e3a\u524d\u9762\u6211\u4eec\u524d\u9762\u8bbe\u7f6e<\/span><span style=\"color:#FF0000\">vrrp<\/span><span style=\"color:#FF0000\">\u7684\u65f6\u5019&#xff0c;<\/span><span style=\"color:#FF0000\">vrid1<\/span><span style=\"color:#FF0000\">\u548c<\/span><span style=\"color:#FF0000\">vrid3<\/span><span style=\"color:#FF0000\">\u90fd\u8bbe\u7f6e\u7684<\/span><span style=\"color:#FF0000\">active<\/span><span style=\"color:#FF0000\">&#xff0c;\u8fd9\u662f\u62a2\u5360\u5f0f&#xff0c;\u5982\u679c\u4f60\u7684<\/span><span style=\"color:#FF0000\">FW2<\/span><span style=\"color:#FF0000\">\u662f\u4e3b&#xff0c;\u4e0d\u7528\u62c5\u5fc3&#xff0c;\u8fd9\u53ea\u662f\u56e0\u4e3a\u4f60\u7684<\/span><span style=\"color:#FF0000\">FW2<\/span><span style=\"color:#FF0000\">\u5148\u62a2\u5230\u4e86\u4e3b\u800c\u5df2\u3011<\/span><\/p>\n<p style=\"margin-left:0;text-align:justify\">\u6b64\u65f6disable\u754c\u9762\u662f\u56e0\u4e3a\u53e6\u4e00\u7aef\u6ca1\u6709\u8fdb\u884c\u53cc\u673a\u70ed\u5907&#xff0c;\u6b64\u65f6\u6211\u4eec\u53bb\u53e6\u4e00\u7aef\u8fdb\u884c\u914d\u7f6e<\/p>\n<p style=\"margin-left:0;text-align:justify\">hrp int g1\/0\/6 remote 1.1.1.1<\/p>\n<p style=\"margin-left:0;text-align:justify\">hrp enable<\/p>\n<p style=\"margin-left:0;text-align:justify\"><img loading=\"lazy\" decoding=\"async\" alt=\"\" height=\"176\" src=\"https:\/\/www.wsisp.com\/helps\/wp-content\/uploads\/2025\/04\/20250418102341-6802282dbf683.png\" width=\"861\" \/><\/p>\n<p style=\"margin-left:0;text-align:justify\">dis hrp state\u67e5\u770b\u60c5\u51b5\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0<\/p>\n<p style=\"margin-left:0;text-align:justify\"><img loading=\"lazy\" decoding=\"async\" alt=\"\" height=\"343\" src=\"https:\/\/www.wsisp.com\/helps\/wp-content\/uploads\/2025\/04\/20250418102341-6802282dd4f10.png\" width=\"1200\" \/><\/p>\n<p style=\"margin-left:0;text-align:justify\">FW1<\/p>\n<p style=\"margin-left:0;text-align:justify\">security-policy&#xff08;\u53ea\u80fd\u5728\u4e3b\u4e0a\u6267\u884c&#xff0c;\u5907\u4e0a\u4e0d\u884c&#xff09;<\/p>\n<p style=\"margin-left:0;text-align:justify\">rule name TtoU<\/p>\n<p style=\"margin-left:0;text-align:justify\">source-zone trust<\/p>\n<p style=\"margin-left:0;text-align:justify\">source-address 192.168.1.0 24<\/p>\n<p style=\"margin-left:0;text-align:justify\">destination-zone untrust<\/p>\n<p style=\"margin-left:0;text-align:justify\">action permit<\/p>\n<p style=\"margin-left:0;text-align:justify\">int g1\/0\/0<\/p>\n<p style=\"margin-left:0;text-align:justify\">service-manage ping permit&#xff08;\u6ca1\u5f00\u4e4b\u524d\u4e0d\u5141\u8bb8&#xff09;<\/p>\n<p style=\"margin-left:0;text-align:justify\">\u73b0\u5728\u5c1d\u8bd5\u7528PC1ping\u7f51\u5173&#xff08;192.168.1.254&#xff09;\u770b\u770b<\/p>\n<p style=\"margin-left:0;text-align:justify\">PC1 ping Client&#xff08;200.1.1.30&#xff09;\u8bd5\u8bd5<\/p>\n<p style=\"margin-left:0;text-align:justify\">\u53d1\u73b0ping\u4e0d\u901a&#xff0c;\u5230g1\/0\/5\u5f00\u542f\u6743\u9650<\/p>\n<p style=\"margin-left:0;text-align:justify\">int g1\/0\/5<\/p>\n<p style=\"margin-left:0;text-align:justify\">service-manage ping permit<\/p>\n<p style=\"margin-left:0;text-align:justify\"><img loading=\"lazy\" decoding=\"async\" alt=\"\" height=\"550\" src=\"https:\/\/www.wsisp.com\/helps\/wp-content\/uploads\/2025\/04\/20250418102342-6802282e0c365.png\" width=\"1200\" \/><\/p>\n<p style=\"margin-left:0;text-align:justify\"><img loading=\"lazy\" decoding=\"async\" alt=\"\" height=\"705\" src=\"https:\/\/www.wsisp.com\/helps\/wp-content\/uploads\/2025\/04\/20250418102342-6802282e49084.png\" width=\"1200\" \/><\/p>\n<p style=\"margin-left:0;text-align:justify\">\u73b0\u5728\u6211\u4eec\u5c1d\u8bd5\u4e00\u4e0b\u4e3b\u5907\u5207\u6362<\/p>\n<p style=\"margin-left:0;text-align:justify\">\u539f\u672cFW1\u662f\u4e3b&#xff08;M&#xff09;&#xff0c;FW2\u662f\u5907&#xff08;S&#xff09;&#8211;<span style=\"color:#FF0000\">\u3010\u5982\u679c\u4f60\u7684\u4e3b\u5907\u673a\u548c\u6211\u7684\u4e0d\u4e00\u6837&#xff0c;\u5219\u662f\u56e0\u4e3a\u524d\u9762\u6211\u4eec\u524d\u9762\u8bbe\u7f6e<\/span><span style=\"color:#FF0000\">vrrp<\/span><span style=\"color:#FF0000\">\u7684\u65f6\u5019&#xff0c;<\/span><span style=\"color:#FF0000\">vrid1<\/span><span style=\"color:#FF0000\">\u548c<\/span><span style=\"color:#FF0000\">vrid3<\/span><span style=\"color:#FF0000\">\u90fd\u8bbe\u7f6e\u7684<\/span><span style=\"color:#FF0000\">active<\/span><span style=\"color:#FF0000\">&#xff0c;\u8fd9\u662f\u62a2\u5360\u5f0f&#xff0c;\u5982\u679c\u4f60\u7684<\/span><span style=\"color:#FF0000\">FW2<\/span><span style=\"color:#FF0000\">\u662f\u4e3b&#xff0c;\u4e0d\u7528\u62c5\u5fc3&#xff0c;\u8fd9\u53ea\u662f\u56e0\u4e3a\u4f60\u7684<\/span><span style=\"color:#FF0000\">FW2<\/span><span style=\"color:#FF0000\">\u5148\u62a2\u5230\u4e86\u4e3b\u800c\u5df2\u3011<\/span><\/p>\n<p style=\"margin-left:0;text-align:justify\">\u73b0\u5728\u6211\u4eec\u5c06FW1\u53d8\u6210S&#xff08;\u5907&#xff09;&#xff0c;FW2\u53d8\u6210M&#xff08;\u4e3b&#xff09;<\/p>\n<p style=\"margin-left:0;text-align:justify\"><img loading=\"lazy\" decoding=\"async\" alt=\"\" height=\"261\" src=\"https:\/\/www.wsisp.com\/helps\/wp-content\/uploads\/2025\/04\/20250418102342-6802282e96c75.png\" width=\"1200\" \/><\/p>\n<p style=\"margin-left:0;text-align:justify\">\u73b0\u5728\u518d\u770bFW1\u548cFW2<\/p>\n<p style=\"margin-left:0;text-align:justify\"><img loading=\"lazy\" decoding=\"async\" alt=\"\" height=\"279\" src=\"https:\/\/www.wsisp.com\/helps\/wp-content\/uploads\/2025\/04\/20250418102342-6802282ebe03e.png\" width=\"556\" \/><\/p>\n<p style=\"margin-left:0;text-align:justify\"><img loading=\"lazy\" decoding=\"async\" alt=\"\" height=\"171\" src=\"https:\/\/www.wsisp.com\/helps\/wp-content\/uploads\/2025\/04\/20250418102342-6802282ee2ac3.png\" width=\"856\" \/><\/p>\n<p style=\"margin-left:0;text-align:justify\">undo shutdown\u5c31\u53ef\u4ee5\u5f00\u542fg1\/0\/5&#xff0c;\u53d6\u6d88\u4e3b\u5907\u5207\u6362<\/p>\n<p style=\"margin-left:0;text-align:justify\"><img loading=\"lazy\" decoding=\"async\" alt=\"\" height=\"309\" src=\"https:\/\/www.wsisp.com\/helps\/wp-content\/uploads\/2025\/04\/20250418102343-6802282f02bf3.png\" width=\"325\" \/><\/p>\n<p style=\"margin-left:0;text-align:justify\"><img loading=\"lazy\" decoding=\"async\" alt=\"\" height=\"156\" src=\"https:\/\/www.wsisp.com\/helps\/wp-content\/uploads\/2025\/04\/20250418102343-6802282f13f27.png\" width=\"262\" \/><\/p>\n<h2 style=\"margin-left:0px;text-align:justify\">FTP\u914d\u7f6e&#xff1a;<\/h2>\n<p style=\"margin-left:0;text-align:justify\">NAT\u6e90\u5730\u5740\u8f6c\u6362 \u5148\u914d\u7f6e\u6e90\u5730\u5740\u6c60<\/p>\n<p style=\"margin-left:0;text-align:justify\">nat address-group 1<\/p>\n<p style=\"margin-left:0;text-align:justify\">section 200.1.1.10 200.1.1.20\u00a0 #\u5730\u5740\u533a\u95f4<\/p>\n<p style=\"margin-left:0;text-align:justify\">q<\/p>\n<p style=\"margin-left:0;text-align:justify\">nat-policy<\/p>\n<p style=\"margin-left:0;text-align:justify\">rule name TtoU<\/p>\n<p style=\"margin-left:0;text-align:justify\">source-zone trust<\/p>\n<p style=\"margin-left:0;text-align:justify\">source-address 192.168.1.0 24<\/p>\n<p style=\"margin-left:0;text-align:justify\">destination-zone untrust<\/p>\n<p style=\"margin-left:0;text-align:justify\">action source-nat address-group 1<\/p>\n<p style=\"margin-left:0;text-align:justify\">q<\/p>\n<p style=\"margin-left:0;text-align:justify\"><img loading=\"lazy\" decoding=\"async\" alt=\"\" height=\"395\" src=\"https:\/\/www.wsisp.com\/helps\/wp-content\/uploads\/2025\/04\/20250418102343-6802282f1f949.png\" width=\"1200\" \/><\/p>\n<p style=\"margin-left:0;text-align:justify\">nat server zone untrust protocol tcp global 200.1.1.29 21 inside 192.168.1.100 21<\/p>\n<p style=\"margin-left:0;text-align:justify\">firewall zone untrust<\/p>\n<p style=\"margin-left:0;text-align:justify\">detect ftp<\/p>\n<p style=\"margin-left:0;text-align:justify\"><img loading=\"lazy\" decoding=\"async\" alt=\"\" height=\"201\" src=\"https:\/\/www.wsisp.com\/helps\/wp-content\/uploads\/2025\/04\/20250418102343-6802282f53274.png\" width=\"1200\" \/><\/p>\n<p style=\"margin-left:0;text-align:justify\">security-policy<\/p>\n<p style=\"margin-left:0;text-align:justify\">rule name toFTP<\/p>\n<p style=\"margin-left:0;text-align:justify\">source-zone untrust<\/p>\n<p style=\"margin-left:0;text-align:justify\">destination-zone trust<\/p>\n<p style=\"margin-left:0;text-align:justify\">destination-address 192.168.1.100 32<\/p>\n<p style=\"margin-left:0;text-align:justify\">action permit<\/p>\n<p style=\"margin-left:0;text-align:justify\">q<\/p>\n<p style=\"margin-left:0;text-align:justify\"><img loading=\"lazy\" decoding=\"async\" alt=\"\" height=\"273\" src=\"https:\/\/www.wsisp.com\/helps\/wp-content\/uploads\/2025\/04\/20250418102343-6802282f72921.png\" width=\"1200\" \/><\/p>\n<p style=\"margin-left:0;text-align:justify\">\u7136\u540e\u6211\u4eec\u6253\u5f00server1\u7684ftp\u670d\u52a1&#xff0c;\u4f7f\u7528Client\u8fdb\u884c\u767b\u5f55&#xff0c;\u4ee5\u4e0b\u662f\u767b\u5f55\u6210\u529f\u7684\u9875\u9762<\/p>\n<p style=\"margin-left:0;text-align:justify\"><img loading=\"lazy\" decoding=\"async\" alt=\"\" height=\"1021\" src=\"https:\/\/www.wsisp.com\/helps\/wp-content\/uploads\/2025\/04\/20250418102343-6802282f9c3bd.png\" width=\"1200\" \/><\/p>\n<h2 style=\"margin-left:0px;text-align:justify\">HTP\u914d\u7f6e&#xff1a;<\/h2>\n<p style=\"margin-left:0;text-align:justify\">FW1:<\/p>\n<p style=\"margin-left:0;text-align:justify\">int g 1\/0\/1<\/p>\n<p style=\"margin-left:0;text-align:justify\">ip add 172.168.1.253 24<\/p>\n<p style=\"margin-left:0;text-align:justify\">vrrp vrid 5 virtual-ip 172.168.1.254 24 active<\/p>\n<p style=\"margin-left:0;text-align:justify\">\n<p style=\"margin-left:0;text-align:justify\">FW2&#xff1a;<\/p>\n<p style=\"margin-left:0;text-align:justify\">int g 1\/0\/1<\/p>\n<p style=\"margin-left:0;text-align:justify\">ip add 172.168.1.252 24<\/p>\n<p style=\"margin-left:0;text-align:justify\">vrrp vrid 5 virtual-ip 172.168.1.254 24\u00a0 active\u00a0 standby<\/p>\n<p style=\"margin-left:0;text-align:justify\">\n<p style=\"margin-left:0;text-align:justify\">FW1&#xff1a;<\/p>\n<p style=\"margin-left:0;text-align:justify\">firewall zone name dmz<\/p>\n<p style=\"margin-left:0;text-align:justify\">add interface g 1\/0\/1<\/p>\n<p style=\"margin-left:0;text-align:justify\">q<\/p>\n<p style=\"margin-left:0;text-align:justify\">#NAT\u7b56\u7565<\/p>\n<p style=\"margin-left:0;text-align:justify\">nat-policy<\/p>\n<p style=\"margin-left:0;text-align:justify\">rule name DtoU<\/p>\n<p style=\"margin-left:0;text-align:justify\">source-zone dmz<\/p>\n<p style=\"margin-left:0;text-align:justify\">source-address 172.168.1.0 24<\/p>\n<p style=\"margin-left:0;text-align:justify\">destination-zone untrust<\/p>\n<p style=\"margin-left:0;text-align:justify\">action source-nat address-group 1<\/p>\n<p style=\"margin-left:0;text-align:justify\">#NAT Server\u914d\u7f6eHTTP\u670d\u52a1<\/p>\n<p style=\"margin-left:0;text-align:justify\">#HHTP\u670d\u52a1&#xff0c;\u6570\u636e\u63a5\u53e380<\/p>\n<p style=\"margin-left:0;text-align:justify\">#\u610f\u5473\u7740\u9700\u8981\u5f00\u653e\u7aef\u53e3&#xff0c;NAT Server\u5f00\u653e\u4e8680\u53e3&#xff0c;\u901a\u8fc7untrust\u533a\u57df\u8f6c\u53d1&#xff0c;\u5f00\u653e\u4e8680\u53e3<\/p>\n<p style=\"margin-left:0;text-align:justify\">nat server zone untrust protocol tcp global 200.1.1.100 80 inside 172.168.1.20 80<\/p>\n<p style=\"margin-left:0;text-align:justify\">firewall zone untrust<\/p>\n<p style=\"margin-left:0;text-align:justify\">detect httpd<\/p>\n<p style=\"margin-left:0;text-align:justify\">q<\/p>\n<p style=\"margin-left:0;text-align:justify\">#\u914d\u7f6e\u5b89\u5168\u7b56\u7565&#xff0c;\u5141\u8bb8\u8bbf\u95eeHTTP\u670d\u52a1\u5668<\/p>\n<p style=\"margin-left:0;text-align:justify\">security-policy<\/p>\n<p style=\"margin-left:0;text-align:justify\">rule name tohttp<\/p>\n<p style=\"margin-left:0;text-align:justify\">source-zone untrust<\/p>\n<p style=\"margin-left:0;text-align:justify\">destination-zone dmz<\/p>\n<p style=\"margin-left:0;text-align:justify\">destination-address 172.168.1.20 32<\/p>\n<p style=\"margin-left:0;text-align:justify\">action permit<\/p>\n<p style=\"margin-left:0;text-align:justify\">int g0\/0\/0<\/p>\n<p style=\"margin-left:0;text-align:justify\">service-manage all permit<\/p>\n<p style=\"margin-left:0;text-align:justify\">\u7136\u540e\u73b0\u5728\u5c31\u53ef\u4ee5\u6d4b\u8bd5\u4e86<\/p>\n<p style=\"margin-left:0;text-align:justify\">\u6253\u5f00server2\u7684http\u670d\u52a1&#xff0c;\u7136\u540e\u7528Client\u8fdb\u884c\u8bbf\u95ee&#xff0c;\u770b\u770b\u662f\u5426\u6210\u529f<\/p>\n<p style=\"margin-left:0;text-align:justify\"><img loading=\"lazy\" decoding=\"async\" alt=\"\" height=\"346\" src=\"https:\/\/www.wsisp.com\/helps\/wp-content\/uploads\/2025\/04\/20250418102344-6802283012b59.png\" width=\"500\" \/><\/p>\n<p><img loading=\"lazy\" decoding=\"async\" alt=\"\" height=\"362\" src=\"https:\/\/www.wsisp.com\/helps\/wp-content\/uploads\/2025\/04\/20250418102344-6802283076a17.png\" width=\"530\" \/><\/p>\n<p>\u5982\u679c\u5bf9\u60a8\u6709\u5e2e\u52a9\u9ebb\u70e6\u70b9\u4e2a\u5173\u6ce8\u70b9\u4e2a\u8d5e~~~ \u00a0<\/p>\n","protected":false},"excerpt":{"rendered":"<p>\u6587\u7ae0\u6d4f\u89c8\u9605\u8bfb3.5k\u6b21\uff0c\u70b9\u8d5e21\u6b21\uff0c\u6536\u85cf42\u6b21\u30021\u3001\u8def\u7531\u3001\u900f\u660e\u3001\u6df7\u54082\u3001\u533a\u57df\uff1aLocal\u3001Trust\u3001Dmz\u3001Untrust3\u3001\u5b89\u5168\u7b56\u7565\uff0c\u533a\u57df\u64cd\u4f5c\uff0cIP\u6761\u4ef6\u3001\u64cd\u4f5c\u3001\u914d\u7f6e\u6587\u4ef6\uff08\u6839\u636e\u73b0\u4eca\u60c5\u51b5\uff0c\u53e6\u5916\u7684\u5b89\u5168\u4ea7\u54c1\u66ff\u4ee3\uff09NAT\u7b56\u7565\uff1a\u6e90\u5730\u5740\u3001\u76ee\u7684\u5730\u5740\u3001\u53cc\u5411\u9759\u6001\u3001\u52a8\u6001\u3001NAPT\u3001Easy-IPNat Server\u3002_ensp\u9632\u706b\u5899\u53cc\u673a\u70ed\u5907<\/p>\n","protected":false},"author":2,"featured_media":11025,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[1],"tags":[513,514,151,67,43,78,44,96],"topic":[],"class_list":["post-11045","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-server","tag-ensp","tag-ftp","tag-http","tag-67","tag-43","tag-78","tag-44","tag-96"],"yoast_head":"<!-- This site is optimized with the Yoast SEO plugin v20.3 - https:\/\/yoast.com\/wordpress\/plugins\/seo\/ -->\n<title>\u3010\u534e\u4e3aensp\u9632\u706b\u5899\u3011\u53cc\u673a\u70ed\u5907+NAT+\u5916\u7f51\u8bbf\u95ee\u5185\u90e8\u670d\u52a1\u5668\uff08http\u3001ftp\uff09 - \u7f51\u7855\u4e92\u8054\u5e2e\u52a9\u4e2d\u5fc3<\/title>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/www.wsisp.com\/helps\/11045.html\" \/>\n<meta property=\"og:locale\" content=\"zh_CN\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"\u3010\u534e\u4e3aensp\u9632\u706b\u5899\u3011\u53cc\u673a\u70ed\u5907+NAT+\u5916\u7f51\u8bbf\u95ee\u5185\u90e8\u670d\u52a1\u5668\uff08http\u3001ftp\uff09 - \u7f51\u7855\u4e92\u8054\u5e2e\u52a9\u4e2d\u5fc3\" \/>\n<meta property=\"og:description\" content=\"\u6587\u7ae0\u6d4f\u89c8\u9605\u8bfb3.5k\u6b21\uff0c\u70b9\u8d5e21\u6b21\uff0c\u6536\u85cf42\u6b21\u30021\u3001\u8def\u7531\u3001\u900f\u660e\u3001\u6df7\u54082\u3001\u533a\u57df\uff1aLocal\u3001Trust\u3001Dmz\u3001Untrust3\u3001\u5b89\u5168\u7b56\u7565\uff0c\u533a\u57df\u64cd\u4f5c\uff0cIP\u6761\u4ef6\u3001\u64cd\u4f5c\u3001\u914d\u7f6e\u6587\u4ef6\uff08\u6839\u636e\u73b0\u4eca\u60c5\u51b5\uff0c\u53e6\u5916\u7684\u5b89\u5168\u4ea7\u54c1\u66ff\u4ee3\uff09NAT\u7b56\u7565\uff1a\u6e90\u5730\u5740\u3001\u76ee\u7684\u5730\u5740\u3001\u53cc\u5411\u9759\u6001\u3001\u52a8\u6001\u3001NAPT\u3001Easy-IPNat Server\u3002_ensp\u9632\u706b\u5899\u53cc\u673a\u70ed\u5907\" \/>\n<meta property=\"og:url\" content=\"https:\/\/www.wsisp.com\/helps\/11045.html\" \/>\n<meta property=\"og:site_name\" content=\"\u7f51\u7855\u4e92\u8054\u5e2e\u52a9\u4e2d\u5fc3\" \/>\n<meta property=\"article:published_time\" content=\"2025-04-18T10:23:45+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/www.wsisp.com\/helps\/wp-content\/uploads\/2025\/04\/20250418102340-6802282c0520c.png\" \/>\n<meta name=\"author\" content=\"admin\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:label1\" content=\"\u4f5c\u8005\" \/>\n\t<meta name=\"twitter:data1\" content=\"admin\" \/>\n\t<meta name=\"twitter:label2\" content=\"\u9884\u8ba1\u9605\u8bfb\u65f6\u95f4\" \/>\n\t<meta name=\"twitter:data2\" content=\"2 \u5206\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\/\/schema.org\",\"@graph\":[{\"@type\":\"WebPage\",\"@id\":\"https:\/\/www.wsisp.com\/helps\/11045.html\",\"url\":\"https:\/\/www.wsisp.com\/helps\/11045.html\",\"name\":\"\u3010\u534e\u4e3aensp\u9632\u706b\u5899\u3011\u53cc\u673a\u70ed\u5907+NAT+\u5916\u7f51\u8bbf\u95ee\u5185\u90e8\u670d\u52a1\u5668\uff08http\u3001ftp\uff09 - \u7f51\u7855\u4e92\u8054\u5e2e\u52a9\u4e2d\u5fc3\",\"isPartOf\":{\"@id\":\"https:\/\/www.wsisp.com\/helps\/#website\"},\"datePublished\":\"2025-04-18T10:23:45+00:00\",\"dateModified\":\"2025-04-18T10:23:45+00:00\",\"author\":{\"@id\":\"https:\/\/www.wsisp.com\/helps\/#\/schema\/person\/358e386c577a3ab51c4493330a20ad41\"},\"breadcrumb\":{\"@id\":\"https:\/\/www.wsisp.com\/helps\/11045.html#breadcrumb\"},\"inLanguage\":\"zh-Hans\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\/\/www.wsisp.com\/helps\/11045.html\"]}]},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\/\/www.wsisp.com\/helps\/11045.html#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"\u9996\u9875\",\"item\":\"https:\/\/www.wsisp.com\/helps\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"\u3010\u534e\u4e3aensp\u9632\u706b\u5899\u3011\u53cc\u673a\u70ed\u5907+NAT+\u5916\u7f51\u8bbf\u95ee\u5185\u90e8\u670d\u52a1\u5668\uff08http\u3001ftp\uff09\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\/\/www.wsisp.com\/helps\/#website\",\"url\":\"https:\/\/www.wsisp.com\/helps\/\",\"name\":\"\u7f51\u7855\u4e92\u8054\u5e2e\u52a9\u4e2d\u5fc3\",\"description\":\"\u9999\u6e2f\u670d\u52a1\u5668_\u9999\u6e2f\u4e91\u670d\u52a1\u5668\u8d44\u8baf_\u670d\u52a1\u5668\u5e2e\u52a9\u6587\u6863_\u670d\u52a1\u5668\u6559\u7a0b\",\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\/\/www.wsisp.com\/helps\/?s={search_term_string}\"},\"query-input\":\"required name=search_term_string\"}],\"inLanguage\":\"zh-Hans\"},{\"@type\":\"Person\",\"@id\":\"https:\/\/www.wsisp.com\/helps\/#\/schema\/person\/358e386c577a3ab51c4493330a20ad41\",\"name\":\"admin\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"zh-Hans\",\"@id\":\"https:\/\/www.wsisp.com\/helps\/#\/schema\/person\/image\/\",\"url\":\"https:\/\/gravatar.wp-china-yes.net\/avatar\/?s=96&d=mystery\",\"contentUrl\":\"https:\/\/gravatar.wp-china-yes.net\/avatar\/?s=96&d=mystery\",\"caption\":\"admin\"},\"sameAs\":[\"http:\/\/wp.wsisp.com\"],\"url\":\"https:\/\/www.wsisp.com\/helps\/author\/admin\"}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"\u3010\u534e\u4e3aensp\u9632\u706b\u5899\u3011\u53cc\u673a\u70ed\u5907+NAT+\u5916\u7f51\u8bbf\u95ee\u5185\u90e8\u670d\u52a1\u5668\uff08http\u3001ftp\uff09 - \u7f51\u7855\u4e92\u8054\u5e2e\u52a9\u4e2d\u5fc3","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/www.wsisp.com\/helps\/11045.html","og_locale":"zh_CN","og_type":"article","og_title":"\u3010\u534e\u4e3aensp\u9632\u706b\u5899\u3011\u53cc\u673a\u70ed\u5907+NAT+\u5916\u7f51\u8bbf\u95ee\u5185\u90e8\u670d\u52a1\u5668\uff08http\u3001ftp\uff09 - \u7f51\u7855\u4e92\u8054\u5e2e\u52a9\u4e2d\u5fc3","og_description":"\u6587\u7ae0\u6d4f\u89c8\u9605\u8bfb3.5k\u6b21\uff0c\u70b9\u8d5e21\u6b21\uff0c\u6536\u85cf42\u6b21\u30021\u3001\u8def\u7531\u3001\u900f\u660e\u3001\u6df7\u54082\u3001\u533a\u57df\uff1aLocal\u3001Trust\u3001Dmz\u3001Untrust3\u3001\u5b89\u5168\u7b56\u7565\uff0c\u533a\u57df\u64cd\u4f5c\uff0cIP\u6761\u4ef6\u3001\u64cd\u4f5c\u3001\u914d\u7f6e\u6587\u4ef6\uff08\u6839\u636e\u73b0\u4eca\u60c5\u51b5\uff0c\u53e6\u5916\u7684\u5b89\u5168\u4ea7\u54c1\u66ff\u4ee3\uff09NAT\u7b56\u7565\uff1a\u6e90\u5730\u5740\u3001\u76ee\u7684\u5730\u5740\u3001\u53cc\u5411\u9759\u6001\u3001\u52a8\u6001\u3001NAPT\u3001Easy-IPNat Server\u3002_ensp\u9632\u706b\u5899\u53cc\u673a\u70ed\u5907","og_url":"https:\/\/www.wsisp.com\/helps\/11045.html","og_site_name":"\u7f51\u7855\u4e92\u8054\u5e2e\u52a9\u4e2d\u5fc3","article_published_time":"2025-04-18T10:23:45+00:00","og_image":[{"url":"https:\/\/www.wsisp.com\/helps\/wp-content\/uploads\/2025\/04\/20250418102340-6802282c0520c.png"}],"author":"admin","twitter_card":"summary_large_image","twitter_misc":{"\u4f5c\u8005":"admin","\u9884\u8ba1\u9605\u8bfb\u65f6\u95f4":"2 \u5206"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"WebPage","@id":"https:\/\/www.wsisp.com\/helps\/11045.html","url":"https:\/\/www.wsisp.com\/helps\/11045.html","name":"\u3010\u534e\u4e3aensp\u9632\u706b\u5899\u3011\u53cc\u673a\u70ed\u5907+NAT+\u5916\u7f51\u8bbf\u95ee\u5185\u90e8\u670d\u52a1\u5668\uff08http\u3001ftp\uff09 - \u7f51\u7855\u4e92\u8054\u5e2e\u52a9\u4e2d\u5fc3","isPartOf":{"@id":"https:\/\/www.wsisp.com\/helps\/#website"},"datePublished":"2025-04-18T10:23:45+00:00","dateModified":"2025-04-18T10:23:45+00:00","author":{"@id":"https:\/\/www.wsisp.com\/helps\/#\/schema\/person\/358e386c577a3ab51c4493330a20ad41"},"breadcrumb":{"@id":"https:\/\/www.wsisp.com\/helps\/11045.html#breadcrumb"},"inLanguage":"zh-Hans","potentialAction":[{"@type":"ReadAction","target":["https:\/\/www.wsisp.com\/helps\/11045.html"]}]},{"@type":"BreadcrumbList","@id":"https:\/\/www.wsisp.com\/helps\/11045.html#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"\u9996\u9875","item":"https:\/\/www.wsisp.com\/helps"},{"@type":"ListItem","position":2,"name":"\u3010\u534e\u4e3aensp\u9632\u706b\u5899\u3011\u53cc\u673a\u70ed\u5907+NAT+\u5916\u7f51\u8bbf\u95ee\u5185\u90e8\u670d\u52a1\u5668\uff08http\u3001ftp\uff09"}]},{"@type":"WebSite","@id":"https:\/\/www.wsisp.com\/helps\/#website","url":"https:\/\/www.wsisp.com\/helps\/","name":"\u7f51\u7855\u4e92\u8054\u5e2e\u52a9\u4e2d\u5fc3","description":"\u9999\u6e2f\u670d\u52a1\u5668_\u9999\u6e2f\u4e91\u670d\u52a1\u5668\u8d44\u8baf_\u670d\u52a1\u5668\u5e2e\u52a9\u6587\u6863_\u670d\u52a1\u5668\u6559\u7a0b","potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/www.wsisp.com\/helps\/?s={search_term_string}"},"query-input":"required name=search_term_string"}],"inLanguage":"zh-Hans"},{"@type":"Person","@id":"https:\/\/www.wsisp.com\/helps\/#\/schema\/person\/358e386c577a3ab51c4493330a20ad41","name":"admin","image":{"@type":"ImageObject","inLanguage":"zh-Hans","@id":"https:\/\/www.wsisp.com\/helps\/#\/schema\/person\/image\/","url":"https:\/\/gravatar.wp-china-yes.net\/avatar\/?s=96&d=mystery","contentUrl":"https:\/\/gravatar.wp-china-yes.net\/avatar\/?s=96&d=mystery","caption":"admin"},"sameAs":["http:\/\/wp.wsisp.com"],"url":"https:\/\/www.wsisp.com\/helps\/author\/admin"}]}},"_links":{"self":[{"href":"https:\/\/www.wsisp.com\/helps\/wp-json\/wp\/v2\/posts\/11045","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.wsisp.com\/helps\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.wsisp.com\/helps\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.wsisp.com\/helps\/wp-json\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/www.wsisp.com\/helps\/wp-json\/wp\/v2\/comments?post=11045"}],"version-history":[{"count":0,"href":"https:\/\/www.wsisp.com\/helps\/wp-json\/wp\/v2\/posts\/11045\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.wsisp.com\/helps\/wp-json\/wp\/v2\/media\/11025"}],"wp:attachment":[{"href":"https:\/\/www.wsisp.com\/helps\/wp-json\/wp\/v2\/media?parent=11045"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.wsisp.com\/helps\/wp-json\/wp\/v2\/categories?post=11045"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.wsisp.com\/helps\/wp-json\/wp\/v2\/tags?post=11045"},{"taxonomy":"topic","embeddable":true,"href":"https:\/\/www.wsisp.com\/helps\/wp-json\/wp\/v2\/topic?post=11045"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}