************************************************** ******************************
* Copyright(c) 2004-2006 Hangzhou Huawei-3Com Tech. Co., Ltd. *
* Without the owner''''s prior written consent, *
* no decompiling or reverse-engineering shall be allowed. *
************************************************** ******************************
Login authentication
Username:admin
Password:
Ethernet1/0 current state :UP
Line protocol current state :UP
Description : Ethernet1/0 Interface
The Maximum Transmit Unit is 1500, Hold timer is 10(sec)
Internet Address is 218.206.191.49 <---(找到公网地址的端口)
IP Sending Frames'''' Format is PKTFMT_ETHNT_2, Hardware address is 000f-e24b-90c1
Media type is twisted pair, loopback not set, promiscuous mode not set
100Mb/s, Full-duplex, link type is autonegotiation
Output flow-control is disabled, input flow-control is disabled
Output queue : (Urgent queuing : Size/Length/Discards) 0/50/0
Output queue : (Protocol queuing : Size/Length/Discards) 0/500/0
Output queue : (FIFO queuing : Size/Length/Discards) 0/75/0
Last clearing of counters: Never
Last 300 seconds input rate 76409.96 bytes/sec, 611279 bits/sec, 221.16 packets/sec
Last 300 seconds output rate 169645.62 bytes/sec, 1357165 bits/sec, 217.84 packets/sec
Input: 84913558 packets, 1899317081 bytes, 84913558 buffers
1556505 broadcasts, 124223 multicasts, 0 pauses
374 errors, 0 runts, 0 giants
0 crc, 0 align errors, 374 overruns
0 dribbles, 0 drops, 0 no buffers
Output:73691649 packets, 1323897889 bytes, 73691649 buffers
19084 broadcasts, 0 multicasts, 0 pauses
0 errors, 0 underruns, 0 collisions
0 deferred, 0 lost carriers
[H3C]int e1/0
[H3C]nat server protocol tcp global 218.206.191.49 www inside 192.168.1.96 www
[H3C]nat server protocol tcp global 218.206.191.49 22 inside 192.168.1.96 22
[H3C]nat server protocol udp global 218.206.191.49 snmp inside 192.168.1.96 snmp
[H3C]nat server protocol udp global 218.206.191.49 snmptrap inside 192.168.1.96 snmptrap <--(一看就大白tcp/udp是以及谈，www是80,snmp以及snmptrap是161.162端口)
[H3C]dis thellos
interface Ethernet1/0
ip address 218.206.191.49 255.255.255.248
firewall packet-filter 3000 inbound
nat outbound 3001 <--(这是客户上彀用的地址池不消管，其它的`就是端口照射了)
nat server protocol tcp global 61.178.77.9 www inside 192.168.1.96 www
nat server protocol tcp global 61.178.77.9 22 inside 192.168.1.96 22
nat server protocol udp global 61.178.77.9 snmp inside 192.168.1.96 snmp
nat server protocol udp global 61.178.77.9 snmptrap inside 192.168.1.96 snmptrap
思科网络的端口照射原理是同样的号令纷歧样罢了，这搭只给出配备布置。
思科网络>en
思科网络#config t
思科网络(config)Ip nat inside source static tcp 192.168.1.96 80 218.206.191.49 80
思科网络(config)Ip nat inside source static tcp 192.168.1.96 22 218.206.191.49 22
思科网络(config)Ip nat inside source static tcp 192.168.1.96 161 218.206.191.49 161
思科网络(config)Ip nat inside source static tcp 192.168.1.96 162 218.206.191.49 162
1.
2.
3.
4.
5.
6.
7.
8.