华为 AR2220 路由器配置示例
一、基本配置
<Huawei> system-view
[Huawei] sysname AR2220-Router
[AR2220-Router] interface GigabitEthernet 0/0/0
[AR2220-Router-GigabitEthernet0/0/0] ip address 202.96.209.2 255.255.255.252
[AR2220-Router-GigabitEthernet0/0/0] undo shutdown
[AR2220-Router-GigabitEthernet0/0/0] quit
[AR2220-Router] interface GigabitEthernet 0/0/1
[AR2220-Router-GigabitEthernet0/0/1] ip address 192.168.0.1 255.255.255.0
[AR2220-Router-GigabitEthernet0/0/1] undo shutdown
[AR2220-Router-GigabitEthernet0/0/1] quit
二、NAT配置
<!-- 配置NAT基础设置 -->
[AR2220-Router] acl number 2000
[AR2220-Router-acl-basic-2000] rule permit source 192.168.0.0 0.0.0.255
[AR2220-Router-acl-basic-2000] quit
<!-- 配置Easy IP -->
[AR2220-Router] interface GigabitEthernet 0/0/0
[AR2220-Router-GigabitEthernet0/0/0] nat outbound 2000
[AR2220-Router-GigabitEthernet0/0/0] quit
<!-- 配置NAT Server -->
[AR2220-Router] interface GigabitEthernet 0/0/0
[AR2220-Router-GigabitEthernet0/0/0] nat server protocol tcp global 202.96.209.2 80 inside 192.168.0.10 8080
[AR2220-Router-GigabitEthernet0/0/0] quit
三、静态路由
<!-- 默认路由 -->
[AR2220-Router] ip route-static 0.0.0.0 0.0.0.0 202.96.209.1
<!-- 静态路由 -->
[AR2220-Router] ip route-static 192.168.10.0 255.255.255.0 192.168.0.254
[AR2220-Router] ip route-static 192.168.20.0 255.255.255.0 192.168.0.254
四、OSPF配置
[AR2220-Router] ospf 1 router-id 1.1.1.1
[AR2220-Router-ospf-1] area 0
[AR2220-Router-ospf-1-area-0.0.0.0] network 192.168.0.0 0.0.0.255
[AR2220-Router-ospf-1-area-0.0.0.0] network 10.0.0.0 0.0.0.255
[AR2220-Router-ospf-1-area-0.0.0.0] quit
[AR2220-Router-ospf-1] default-route-advertise always
[AR2220-Router-ospf-1] quit
五、DHCP配置
[AR2220-Router] dhcp enable
[AR2220-Router] ip pool LAN_POOL
[AR2220-Router-ip-pool-LAN_POOL] network 192.168.0.0 mask 255.255.255.0
[AR2220-Router-ip-pool-LAN_POOL] gateway-list 192.168.0.1
[AR2220-Router-ip-pool-LAN_POOL] dns-list 8.8.8.8 114.114.114.114
[AR2220-Router-ip-pool-LAN_POOL] lease day 7
[AR2220-Router-ip-pool-LAN_POOL] excluded-ip-address 192.168.0.1 192.168.0.50
[AR2220-Router-ip-pool-LAN_POOL] quit
[AR2220-Router] interface GigabitEthernet 0/0/1
[AR2220-Router-GigabitEthernet0/0/1] dhcp select global
[AR2220-Router-GigabitEthernet0/0/1] quit
六、保存配置
[AR2220-Router] return
<Huawei> save
The current configuration will be written to the device.
Are you sure to continue?[Y/N]Y
配置要点总结
- NAT:使用Easy IP简化配置,NAT Server发布内部服务
- 路由协议:OSPF适合中大型网络,静态路由适合简单环境
- DHCP:合理规划地址池,预留静态分配地址
- 安全:配合ACL实现访问控制
七、配置命令详解
1. 接口配置命令解释
| 命令 |
解释 |
interface GigabitEthernet 0/0/0 |
进入千兆以太网接口0/0/0配置视图 |
ip address 202.96.209.2 255.255.255.252 |
配置接口IP地址和子网掩码 |
undo shutdown |
启用接口(默认可能是关闭状态) |
2. NAT配置命令解释
| 命令 |
解释 |
acl number 2000 |
创建基本ACL编号2000 |
rule permit source 192.168.0.0 0.0.0.255 |
允许192.168.0.0/24网段访问 |
nat outbound 2000 |
应用NAT转换,将ACL匹配的地址转换为接口公网IP |
nat server protocol tcp global ... inside ... |
配置端口映射,将公网端口映射到内网服务器 |
3. 路由配置命令解释
| 命令 |
解释 |
ip route-static 0.0.0.0 0.0.0.0 202.96.209.1 |
配置默认路由,所有未知目的地址转发到202.96.209.1 |
ospf 1 router-id 1.1.1.1 |
启动OSPF进程1,设置路由器ID为1.1.1.1 |
network 192.168.0.0 0.0.0.255 |
将192.168.0.0/24网段加入OSPF区域 |
4. 配置要点总结
配置顺序建议:
- 配置WAN口和LAN口IP地址
- 配置NAT实现内网访问外网
- 配置路由(静态或动态)
- 配置DHCP服务
- 保存配置