华为ar2811 内网FTP端口映射外网不能访问FTP

yeqilai 2009-07-31 09:45:21

sysname Quidway
#
cpu-usage cycle 1min
#
radius scheme system
#
domain system
#
local-user admin
password cipher `Q;P2$Z'U$KQ=^Q`MAF4<1!!
service-type telnet terminal
level 3
service-type ftp
local-user telnet
password cipher V=MH04OWZ^'Q=^Q`MAF4<1!!
service-type telnet
level 3
#
acl number 2100
rule 0 permit source 192.168.11.0 0.0.0.255
rule 1 permit source 192.168.12.0 0.0.0.255
#
interface Aux0
async mode flow
#
interface Ethernet0/0
ip address 119.1**.196.242 255.255.255.248
nat outbound 2100
nat server protocol tcp global 119.1**.196.244 any inside 192.168.12.3 any
nat server protocol icmp global 119.1**.196.244 inside 192.168.12.3
nat server protocol udp global 119.1**.196.245 any inside 192.168.12.4 any
nat server protocol tcp global 119.1**.196.245 any inside 192.168.12.4 any
nat server protocol icmp global 119.1**.196.245 inside 192.168.12.4
nat server protocol tcp global 119.1**.196.242 9097 inside 192.168.11.138 9097
nat server protocol udp global 119.1**.196.242 9097 inside 192.168.11.138 9097
nat server protocol tcp global 119.1**.196.243 9097 inside 192.168.11.253 9097
nat server protocol udp global 119.1**.196.244 9097 inside 192.168.11.253 9097
nat server protocol udp global 119.1**.196.246 any inside 192.168.12.2 any
nat server protocol tcp global 119.1**.196.246 any inside 192.168.12.2 any
nat server protocol tcp global 119.1**.196.242 ftp inside 192.168.11.253 ftp
#
interface Ethernet0/1
ip address 192.168.12.1 255.255.255.0
ip address 192.168.11.1 255.255.255.0 sub
nat outbound 3000
nat server protocol tcp global 119.1**.196.242 ftp inside 192.168.11.253 ftp
#
interface Serial0/0
clock DTECLK1
link-protocol ppp
ip address dhcp-alloc
#
interface NULL0
#
FTP server enable
#
ip route-static 0.0.0.0 0.0.0.0 119.1**.196.241 preference 60
#
user-interface con 0
user-interface aux 0
user-interface vty 0 4
authentication-mode schem

...全文