之前老路由器的设置： ZXR10#show run Building configuration... ! ! ip dhcp-client disable ! urpf log off ! mac-filter permit all ! blacklist disable ! ! interface loopback1 ip address 10.10.10.10 255.255.255.0 out_index 9 ip nat outside ! interface null1 out_index 1 ! interface cellular1 out_index 2 ! interface cellular2 out_index 3 ! interface fei_0/1 ip address 192.168.0.1 255.255.255.252 out_index 4 negotiation auto interface-attribute lan ip policy route-map zte ip nat inside ! interface fei_0/2 out_index 5 negotiation auto interface-attribute lan ! interface gei_0/3 ip address 192.168.0.5 255.255.255.252 out_index 6 hybrid-attribute fiber negotiation auto ip policy route-map zte ip nat inside ! interface gei_0/4 ip address 59.51.27.78 255.255.255.0 out_index 7 hybrid-attribute copper negotiation auto interface-attribute wan ip nat outside ! interface gei_0/5 out_index 8 hybrid-attribute copper no negotiation auto ! ! reference clock local ! ip nat max-entry-number 64 ip nat start ip nat pool natpool 59.51.27.78 59.51.27.78 prefix-length 24 ip nat inside source list 1 pool natpool overload ip nat inside source static tcp 192.168.255.4 8088 222.241.161.190 8088 ip nat inside source static tcp 192.168.255.10 8888 222.241.161.190 8888 ip nat inside source static tcp 192.168.255.4 9000 222.241.161.190 9000 ip nat inside source static tcp 192.168.1.123 3389 59.51.27.78 3389 ip nat translation timeout class a 20 ip nat translation timeout class b 60 ip nat translation timeout class c 150 ip nat translation timeout class d 300 ip nat translation timeout class e 1200 ip nat translation timeout protocol icmp a ip nat translation timeout protocol ip d ip nat translation timeout protocol tcp port 80 a ip nat translation timeout protocol tcp d ip nat translation timeout protocol udp port 4000 d ip nat translation timeout protocol udp port 4001 d ip nat translation timeout protocol udp port 4002 d ip nat translation timeout protocol udp port 4003 d ip nat translation timeout protocol udp port 8000 d ip nat translation timeout protocol udp port 8001 d ip nat translation timeout protocol udp c ip nat translation maximal default 65535 ! ip route 0.0.0.0 0.0.0.0 59.51.27.1 ip route 192.168.1.0 255.255.255.0 192.168.0.2 ip route 192.168.255.0 255.255.255.0 192.168.0.6 ! voice class service ! ! no ipv6 nat enable ! ! time-range disable ! acl standard number 1 rule 1 permit 192.168.1.0 0.0.0.255 rule 2 permit 192.168.255.0 0.0.0.255 ! acl extended number 100 rule 1 permit ip 192.168.1.0 0.0.0.255 59.51.27.78 0.0.0.0 rule 3 permit ip 192.168.255.0 0.0.0.255 59.51.27.78 0.0.0.0 ! ! ! ip tcp intercept mode intercept ip tcp intercept drop-mode oldest ip tcp intercept watch-timeout 30 ip tcp intercept finrst-timeout 5 ip tcp intercept connection-timeout 86400 ip tcp intercept max-incomplete high 1100 ip tcp intercept max-incomplete low 900 ip tcp intercept one-minute high 1100 ip tcp intercept one-minute low 900 ! route-map zte permit 10 match ip address 100 set interface loopback1 ! ! nas ! version V4.8.01.B.01 ! nvram mng-ip-address 10.40.88.12 255.255.0.0 ! nvram boot-username target ! nvram boot-password target ! nvram boot-server 10.40.88.171 ! nvram imgfile-location local ! hostname ZXR10 ! forward re-fragment time 6 ! enable secret level 15 5 WEUqjcQKZuos+Ff62SjBdA== ! service password-encryption ! username zte password encrypted a0a91a7b27f17078b48506f6f76a69a5347dfa1d94f30082 89d8a25d1a179a1d privilege 15 username liuxuwen password encrypted 6cf28ef2d203c91bfdc9077293ce0d8dd48e3accec7 aed1a491f3b95c2c32a6f privilege 15 username weishengju password encrypted 4cd3ecb08176c3850cc660b4ac0d83308de168e97 29517404227f97f5cf1c89d ! user-authentication-type local user-authorization-type local ! line console 0 login authentication ! banner incoming @ ***************************************************** Welcome to ZXR10 ZSR Serial Router of ZTE Corporation ***************************************************** @ ! ! lfap disable lfap max-send-fun-size 100 lfap update-interval 60 lfap server-retry-interval 60 lfap message-response-interval 60 lfap ka-interval 60 lfap flow-expired-time 600 ! ! ! snmp-server location No.68 Zijinghua Rd. Yuhuatai District, Nanjing, China snmp-server contact +86-25-52870000 snmp-server packetsize 1400 snmp-server engine-id 830900020300010289d64401 snmp-server view AllView internet included snmp-server view DefaultView system included ! ! web enable ! logging on logging buffer 200 logging mode fullcycle logging console notifications logging level notifications logging cmdlog-interval 2880 logging timestamps datetime localtime alarm cpuload-on alarm cpuload-interval 30 alarm cpuload-threshold high-grade 95 middle-grade 85 low-grade 75 syslog-server facility local0 ! line console idle-timeout 120 line console absolute-timeout 1440 line telnet idle-timeout 120 line telnet absolute-timeout 1440 ! ssh server enable ssh server authentication ispgroup 1 ssh server authentication mode local ssh server authentication type chap no ssh server only ssh server version 2 ! ! radius auto-change off ! ! ! radius server-port-check off ! ! tacacs disable tacacs-server timeout 60 tacacs-server packet 1024 ! ! amat disable system monitor on ! ip stream disable ! end
Route tract C:\Documents and Settings\Administrator>tracert 222.241.161.18
Tracing route to 222.241.161.18 over a maximum of 30 hops
1 3 ms 3 ms 3 ms 192.168.1.1 2 <1 ms <1 ms <1 ms 192.168.0.1 3 4 ms 1 ms 1 ms 59.51.27.1 4 3 ms 1 ms <1 ms 222.241.161.18