interface Ethernet0/1 no shutdown
switchport access vlan 20 end
write memory 配置NAT转换 config terminal
nat (inside) 1 0.0.0.0 0.0.0.0
global (outside) 1 10.4.110.31-10.4.110.40 netmask 255.255.255.0 end
write memory 配置路由 config terminal
route outside 0.0.0.0 0.0.0.0 10.4.110.1 1 route inside 172.16.2.0 255.255.255.0 12.1.1.2 1 route inside 23.1.1.0 255.255.255.0 12.1.1.2 1 end
write memory
三、服务器配置
1、 FTP服务器
ftp服务器环境:window 7 工具:serv-u
ftp服务器地址: IP:172.16.2.252
子网掩码:255.255.255.224 默认网关:172.16.2.254 IP访问规则:
即只有采购部网段172.16.2.128-172.16.2.158才能访问FTP服务器,进行共享文件,其他部门不能登录
2、 DNS服务器
Dns服务器系统环境:linux5
Dns服务器地址:
服务器所需软件包:
[root@sevice1 ~]# rpm -qa|grep bind bind-chroot-9.3.4-6.P1.el5 bind-libs-9.3.4-6.P1.el5 bind-9.3.4-6.P1.el5 ypbind-1.19-8.el5 bind-utils-9.3.4-6.P1.el5
caching-nameserver-9.3.4-6.P1.el5 基本配置文件 对主配置文件的配置 /etc/named.conf // named.rfc1912.zones: //
// Provided by Red Hat caching-nameserver package //
// ISC BIND named zone configuration for zones recommended by // RFC 1912 section 4.1 : localhost TLDs and address zones //
// See /usr/share/doc/bind*/sample/ for example named configuration files. // options {
directory \};
zone \ type hint; file \};
zone \ type master;
file \ allow-update { none; }; };
zone \ type master; file \ allow-update { none; }; };
zone \ type master; file \ allow-update { none; }; };
zone \ type master;
file \ allow-update { none; }; };
zone \
type master;
file \ allow-update { none; }; };
zone \ type master; file \ allow-update { none; }; };
zone \
/bin/bash: indent: command not found file \ allow-update { none; }; };
zone \ //自己添加的正向区域 type master;
file \ //正向区域文件名 allow-update { none; }; };
zone \ //自己添加的反向区域 type master;
file \ //正向区域文件名 allow-update { none; }; }
生成正向区域文件和方向区域文件: /var/named/chroot/var/named/2.16.172.zone
$TTL 86400
2.16.172.in-addr.arpa. IN SOA ns.g409.com. root.g409.com. ( 1997022700 ; Serial 28800 ; Refresh 14400 ; Retry 3600000 ; Expire 86400 ) ; Minimum IN NS ns.g409.com. 252 IN PTR www.g409.com. /var/named/chroot/var/named/g409.com $TTL 86400
@ IN SOA ns.g409.com. root.g409.com. (
42 ; serial (d. adams) 3H ; refresh 15M ; retry 1W ; expiry 1D ) ; minimum
IN NS ns.g409.com. IN MX 10 mail IN A 172.16.2.252 ns IN A 172.16.2.252 www IN A 172.16.2.252