需求說明:公網(wǎng)122.93.43.X:16927 映射 內(nèi)網(wǎng) 10.100.124.200:80
我們注重客戶提出的每個要求,我們充分考慮每一個細節(jié),我們積極的做好成都網(wǎng)站建設(shè)、網(wǎng)站建設(shè)服務(wù),我們努力開拓更好的視野,通過不懈的努力,創(chuàng)新互聯(lián)贏得了業(yè)內(nèi)的良好聲譽,這一切,也不斷的激勵著我們更好的服務(wù)客戶。 主要業(yè)務(wù):網(wǎng)站建設(shè),網(wǎng)站制作,網(wǎng)站設(shè)計,成都微信小程序,網(wǎng)站開發(fā),技術(shù)開發(fā)實力,DIV+CSS,PHP及ASP,ASP.Net,SQL數(shù)據(jù)庫的技術(shù)開發(fā)工程師。
定義內(nèi)網(wǎng)地址
set security nat destination pool srv200-80 address 10.100.124.200/32
定義內(nèi)網(wǎng)端口號
set security nat destination pool srv200-80 address port 80
定義公網(wǎng)地址+端口
edit security nat destination
set rule-set untrust-trust-set rule un122-srv200-443 match source-address 0.0.0.0/0
set rule-set untrust-trust-set rule un122-srv200-443 match destination-address 122.93.43.X/32
set rule-set untrust-trust-set rule un122-srv200-443 match destination-port 16927 ##公網(wǎng)端口
set rule-set untrust-trust-set rule un122-srv200-443 match protocol tcp
set rule-set untrust-trust-set rule un122-srv200-443 then destination-nat pool srv200-80
定義內(nèi)網(wǎng)協(xié)議+端口
set applications application tcp-80 protocol tcp
set applications application tcp-80 destination-port 80
定義內(nèi)網(wǎng)地址
set security zones security-zone trust address-book address srv200 10.100.124.200
定義策略
edit security policies from-zone untrust to-zone trust
set policy utot-srv11-3389 match source-address any
set policy utot-srv11-3389 match destination-address srv200
set policy utot-srv11-3389 match application tcp-80 ###### 定義內(nèi)網(wǎng)真實端口####
set policy utot-srv11-3389 match application junios-http
set policy utot-srv11-3389 then permit