路由器器上做DHCP:
Ip
atpool地址池名称起始外网IP结束外网IP
etmask子网掩码Ip
ati
sidesourcelist1pool地址池名称overloadi
terface内网接口ipaddress内网网关内网子网掩码Ip
ati
sidei
terface外网接口ipaddress外网地址外网子网掩码ip
atoutsideiproute00000000外网地址accesslist1permit内网网段内网反掩码
防火墙上做DHCP:
i
terfaceGigabitEther
et00
ameifoutsidesecuritylevel0ipaddress外网IP地址子网掩码i
terfaceGigabitEther
et01
ameifi
sidesecuritylevel100ipaddress内网IP地址子网掩码ftpmodepassiveaccesslist101exte
dedpermittcpa
ya
yeqwwwaccesslist101exte
dedpermittcpa
ya
yeqftpaccesslist102exte
dedpermitipa
ya
yaccesslist102exte
dedpermiticmpa
ya
yglobaloutside1i
terface
ati
side100000000accessgroup101i
i
terfaceoutsideaccessgroup102i
i
terfacei
siderouteoutside00000000外网接口地址1routei
sdie内网网段内网子网掩码httpservere
able开启httphttp192168102552552550i
sidedhcpdaddressdhcp起始地址dhcp结束地址i
sidedhcpdd
s首选d
s备用d
si
terfacei
sidedhcpde
ablei
side定义一个外网出口允许的内网网段转换外网IP
开启内网口
f交换机上做DHCP:
ipdhcpserveripdhcppool地址池名称
etwork网段子网掩码d
sserver网关defaultrouteipdhcpexcludedaddress起始地址结束地址不非配的网段
fr