[Router] vlan 20
[Router] traffic classifier c1 operator
or
[Router] traffic behavior b1
[Router-behavior-b1] deny
//對匹配規則的報文配置禁止動作
[Router] traffic policy p1
[Router- policy-p1]
classifier c1 behavior b1 //配置流策略p1,綁定流分類c1和流行為b1
[Router] interface
Vlanif20
[Router- Vlanif20] ip address 192.168.88.1
255.255.255.0
[Router- Vlanif20] traffic-policy p1 inbound
//將流策略p1應用在接口VLANIF20的入方向
[Router] interface GigabitEthernet
0/0/1
[Router-GigabitEthernet 0/0/1] ip address 106.3.45.2
255.255.255.192
[Router-GigabitEthernet 0/0/1] traffic-policy p1 inbound
//將流策略p1應用在接口GE0/0/1的入方向
[Router] interface GigabitEthernet
0/0/2
[Router-GigabitEthernet 0/0/2] port link-type
trunk
[Router-GigabitEthernet 0/0/2] port trunk allow-pass vlan
20
[Router] ip route-static 0.0.0.0 0.0.0.0 106.3.45.1
//配置靜態路由,服務器租用
免備案服務器,保證內網到外網報文的下一跳地址是106.3.45.1
,域名注冊