DNAT负载均衡功能配置案例.doc

DNAT负载均衡功能配置案例DNAT负载均衡功能配置案例(设置内网服务器对互联网提供服务)拓扑图如附件所示。需求说明：内网有三台http服务器（/3/4）要对外提供服务，使用的外网口地址是，需对外提供负载均衡的功能。后续准备还要增加邮件、ftp等服务器。同时，允许这些服务器能够方便在家休息时的网管人员能管理远程的服务器。具体配置如下：address cluster1range host host host exitservice rdptcp dst-port 3389 timeout 1800exitinterface vswitchif1zonetrustip address manage sshmanage pingmanage httpmanage httpsexitinterface ethernet0/1zoneuntrustip address 1 manage sshmanage pingmanage httpsexitip vrouter trust-vrip route /0 exitpolicy from trust to untrustrule id 2 action permit src-addr Any dst-addr Any service Anyexitexitpolicy from untrust to trustrule id 3 action permit src-addr Any dst-addr Any service HTTP service FTP service POP3 service PING service SMTP service rdp service ICMPexitpolicy from l2-trust to l2-trustrule id 4 action permit src-addr Any dst-addr Any service Anyexitnatsnatrule id 1 from cluster1 to Any eif ethernet0/1 trans-to address-book 0 mode dynamicport sticky exitnatsnatrule id 2 from Any to Any eif ethernet0/1 trans-to eif-ip mode dynamicport sticky exitnatdnatrule id 2 from Anyto 0 service PING trans-to load-balance track-ping exitnatdnatrule id 1 from Anyto 0 service HTTP trans-to load-balance track-ping exitnatdnatrule id 4 from Anyto 0 service rdp trans-to load-balance track-ping exitnatdnatrule id 3 from Anyto 0 service PING trans-to load-balance track-ping exitnatdnatrule id 5 from Anyto 0 service HTTP trans-to load-balance track-ping exitnatdnatrule id 6 from Anyto 0 service rdp trans-to load-balance track-ping exitnatdnatrule id 7 from Anyto 0 service PING trans-to load-balance track-ping exitnatdnatrule id 8 from Anyto 0 service HTTP trans-to load-balance track-ping e