[Router] vlan 20
[Router] traffic classifier c1 operator
or
[Router] traffic behavior b1
[Router-behavior-b1] deny
//对匹配规则的报文配置禁止动作
[Router] traffic policy p1
[Router- policy-p1]
classifier c1 behavior b1 //配置流策略p1,绑定流分类c1和流行为b1
[Router] interface
Vlanif20
[Router- Vlanif20] ip address 192.168.88.1
255.255.255.0
[Router- Vlanif20] traffic-policy p1 inbound
//将流策略p1应用在接口VLANIF20的入方向
[Router] interface GigabitEthernet
0/0/1
[Router-GigabitEthernet 0/0/1] ip address 106.3.45.2
255.255.255.192
[Router-GigabitEthernet 0/0/1] traffic-policy p1 inbound
//将流策略p1应用在接口GE0/0/1的入方向
[Router] interface GigabitEthernet
0/0/2
[Router-GigabitEthernet 0/0/2] port link-type
trunk
[Router-GigabitEthernet 0/0/2] port trunk allow-pass vlan
20
[Router] ip route-static 0.0.0.0 0.0.0.0 106.3.45.1
//配置静态路由,服务器租用
免备案服务器,保证内网到外网报文的下一跳地址是106.3.45.1
,域名注册