一、拓补图
线路1：
线路2：
线路3：
二、配置代码：
telnet 168.33.32.200
username:h3c2012
password:lhj2012
system-view
[H3C]dis current-configuration
#
version 5.20, Release 2104P02, Basic
#
sysname H3C
#
firewall enable
#
domain default enable system
#启用dns转发功能和设置dns转发服务器
dns proxy enable
dns server 202.96.134.133
dns server 202.96.128.68
#启用telnet服务
telnet server enable
#
dar p2p signature-file cfa0:/p2p_default.mtd
#
port-security enable
#为作nat作好规则
acl number 3000
rule 0 deny tcp source-port eq telnet
acl number 3001
rule 0 permit ip
#
vlan 1
#
domain system
access-limit disable
state active
idle-cut disable
self-service-url disable
#
user-group system
#配置telnet的用户名密码
local-user xxxxx
password cipher .]@USE=B,53Q=^Q`MAF4<1!!
authorization-attribute level 3
service-type telnet
local-user xxxxx
password cipher Y)M39I^&5`3Q=^Q`MAF4<1!!
authorization-attribute level 3
service-type telnet
#
interface Aux0
async mode flow
link-protocol ppp
#
interface Cellular0/0
async mode protocol
link-protocol ppp
#
interface Ethernet0/0
port link-mode route
#作好防问墙的设置
firewall packet-filter 3000 outbound
#作好nat的设置
nat outbound 3001
ip address 路由器IP 路由器和外网互通的IP 255.255.255.240
#
interface Ethernet0/1
port link-mode route
ip address 路由器和内网互的IP 255.255.0.0
#
interface NULL0
#
ip route-static 0.0.0.0 0.0.0.0 电信给的外网网关
#
load xml-configuration
#
user-interface con 0
user-interface tty 13
user-interface aux 0
user-interface vty 0 4
user privilege level 3
authentication-mode scheme ##设置这个之后，就可以用设置的用户名和密码
telnet进入路由器了
set authentication password cipher Y)M39I^&5`3Q=^Q`MAF4<1!!
#
return
