• 全部
  • 经验案例
  • 典型配置
  • 技术公告
  • FAQ
  • 漏洞说明
  • 全部
  • 全部
  • 大数据引擎
  • 知了引擎
产品线
搜索
取消
案例类型
发布者
是否解决
是否官方
时间
搜索引擎
匹配模式
高级搜索

MSR1008NAT端口映射公网访问异常

2025-12-20提问
  • 0关注
  • 0收藏,315浏览
粉丝:0人 关注:0人

问题描述:

系统说我的提问有敏感字符,也不知道哪里了,所以就用图片贴的

4 个回答
Xcheng 九段
粉丝:151人 关注:3人

你这个是宽带套餐和业务系统支持问题。。。

并非MSR路由器导致。。。


建议考虑解决方案

1、更换宽带套餐

2、更换稳定的ddns服务商

3、找业务系统确认应用本身NAT支持情况

4、SSLVPN接入

回复zhiliao_fELWp:

建议联系400热线或供应商沟通细节定位吧。如果怀疑设备异常。

Xcheng 发表时间:2025-12-20 更多>>

前面用的是msr830,就可以正常使用啊

zhiliao_fELWp 发表时间:2025-12-20
回复zhiliao_fELWp:

建议联系400热线或供应商沟通细节定位吧。如果怀疑设备异常。

Xcheng 发表时间:2025-12-20
zhiliao_fELWp 知了小白
粉丝:0人 关注:0人

明明付了配置在附件里面,怎么看不到?

#
version 9.1.063, Release 9141P16
#
sysname ab136
#
clock timezone Beijing add 08:00:00
clock protocol ntp
#
wlan global-configuration
firmware-upgrade disable
#
telnet server enable
telnet server acl 2245
#
dialer-group 2 rule ip permit
#
ip load-sharing mode per-flow src-ip global
#
dhcp enable
#
dns proxy enable
#
system-working-mode standard
password-recovery enable
#
vlan 1
#
object-group ip address _web_manageTelnet_group_
0 network range 172.19.99.1 172.19.99.254
#
dhcp server ip-pool lan1
gateway-list 172.19.99.254
network 172.19.99.0 mask 255.255.255.0
address range 172.19.99.200 172.19.99.254
dns-list 218.85.152.99 218.85.157.99
static-bind ip-address 172.19.99.84 mask 255.255.255.0 hardware-address 7804-e3ec-8f6d description 华为智慧屏有线
static-bind ip-address 172.19.99.85 mask 255.255.255.0 hardware-address b8ab-62d2-5bbc description 华为智慧屏无线
static-bind ip-address 172.19.99.86 mask 255.255.255.0 hardware-address 6c0d-c42e-e1e7 description redmi98LAN
static-bind ip-address 172.19.99.87 mask 255.255.255.0 hardware-address 6839-43ce-37f7 description redme98wifi
static-bind ip-address 172.19.99.88 mask 255.255.255.0 hardware-address 800a-8056-b233 description zhido
static-bind ip-address 172.19.99.94 mask 255.255.255.0 hardware-address 3096-1006-ed17 description mate70
static-bind ip-address 172.19.99.95 mask 255.255.255.0 hardware-address ae09-b5e3-c5a3 description honorX_50
static-bind ip-address 172.19.99.96 mask 255.255.255.0 hardware-address 5261-d56b-25a1 description honor30
static-bind ip-address 172.19.99.97 mask 255.255.255.0 hardware-address c028-0b9f-db3b description honor50
static-bind ip-address 172.19.99.98 mask 255.255.255.0 hardware-address a4c5-4e61-404b description mate40Epro
static-bind ip-address 172.19.99.99 mask 255.255.255.0 hardware-address 20da-22c9-17dc description P30
static-bind ip-address 172.19.99.100 mask 255.255.255.0 hardware-address 0011-32ec-eab3 description SynologyNAS
static-bind ip-address 172.19.99.101 mask 255.255.255.0 hardware-address 50ec-503a-7029 description cam-f2-1
static-bind ip-address 172.19.99.102 mask 255.255.255.0 hardware-address 7811-dcd6-56c9 description cam-f2-2
static-bind ip-address 172.19.99.103 mask 255.255.255.0 hardware-address 649e-3102-ef96 description xiyiji
static-bind ip-address 172.19.99.104 mask 255.255.255.0 hardware-address 68ab-bc4b-2047 description miFS2f
static-bind ip-address 172.19.99.105 mask 255.255.255.0 hardware-address 849d-c2b0-bd2e description jingshuiqi
static-bind ip-address 172.19.99.106 mask 255.255.255.0 hardware-address 986e-e82f-aa39 description 台式机
static-bind ip-address 172.19.99.107 mask 255.255.255.0 hardware-address 3c46-d8d6-1f56 description CQ45
static-bind ip-address 172.19.99.108 mask 255.255.255.0 hardware-address 0211-322d-d7a5 description VM-win
static-bind ip-address 172.19.99.109 mask 255.255.255.0 hardware-address 0211-3228-191d description VM-Ubuntu
static-bind ip-address 172.19.99.110 mask 255.255.255.0 hardware-address b40b-4491-f73f description bin
static-bind ip-address 172.19.99.111 mask 255.255.255.0 hardware-address 54c6-ff77-fcc0 description apN1
static-bind ip-address 172.19.99.112 mask 255.255.255.0 hardware-address 54c6-ff77-f640 description apN2
static-bind ip-address 172.19.99.113 mask 255.255.255.0 hardware-address f0f2-d195-52cf description meidi-GW
static-bind ip-address 172.19.99.114 mask 255.255.255.0 hardware-address f010-903d-c040 description apO2
static-bind ip-address 172.19.99.115 mask 255.255.255.0 hardware-address 14d8-6432-92c9 description tppoe
static-bind ip-address 172.19.99.116 mask 255.255.255.0 hardware-address 9820-448f-6ca0 description apH
static-bind ip-address 172.19.99.117 mask 255.255.255.0 hardware-address 2c19-5c2b-b788 description 米家插座
static-bind ip-address 172.19.99.206 mask 255.255.255.0 hardware-address 5004-b854-e37a description un206
#

#
interface Dialer1
ppp chap password cipher $c$3$AI0FdOhCHTp04WzB6+iSg8hcLXKICHzr+A==
ppp chap user 0595
ppp ipcp dns admit-any
ppp ipcp dns request
ppp pap local-user 0595 password cipher $c$3$sqyAc/AefEPge+odBCpF8JQEHqM5i0LZMg==
dialer bundle enable
dialer-group 2
dialer timer idle 0
dialer timer autodial 5
ip address ppp-negotiate
tcp mss 1280
packet-filter name WebPing65541 inbound
nat outbound
nat server protocol tcp global current-interface 4000 4001 inside 172.19.99.2 4000 4001
nat server protocol tcp global current-interface 5000 inside 172.19.99.100 5000
nat server protocol tcp global current-interface 5001 inside 172.19.99.100 5001
nat server protocol tcp global current-interface 5800 inside 172.19.99.254 80
nat server protocol tcp global current-interface 5998 inside 172.19.99.106 3389
nat server protocol tcp global current-interface 5999 inside 172.19.99.108 3389
nat server protocol tcp global current-interface 6690 inside 172.19.99.100 6690
nat server protocol tcp global current-interface 6881 inside 172.19.99.100 6881
nat server protocol tcp global current-interface 9010 inside 172.19.99.169 9010
nat server protocol tcp global current-interface 9020 inside 172.19.99.169 9020
nat server protocol tcp global current-interface 16881 inside 172.19.99.100 16881
nat server protocol tcp global current-interface 18080 inside 172.19.99.169 80
nat server protocol tcp global current-interface 22222 inside 172.19.99.108 22222
nat server protocol udp global current-interface 500 inside 172.19.99.100 500
nat server protocol udp global current-interface 1701 inside 172.19.99.100 1701
nat server protocol udp global current-interface 4500 inside 172.19.99.100 4500
#
interface NULL0
#
interface Vlan-interface1
description LAN-interface
ip address 172.19.99.254 255.255.255.0
tcp mss 1280
nat hairpin enable
#
interface GigabitEthernet0/0/0
port link-mode route
combo enable copper
#
interface GigabitEthernet0/0/1
port link-mode route
description Single_Line1
combo enable copper
arp max-learning-num 0
pppoe-client dial-bundle-number 1
#
interface GigabitEthernet0/0/2
port link-mode bridge
#
interface GigabitEthernet0/0/3
port link-mode bridge
#
interface GigabitEthernet0/0/4
port link-mode bridge
#
interface GigabitEthernet0/0/5
port link-mode bridge
#
interface GigabitEthernet0/0/6
port link-mode bridge
#
interface GigabitEthernet0/0/7
port link-mode bridge
#
interface GigabitEthernet0/0/8
port link-mode bridge
#
interface GigabitEthernet0/0/9
port link-mode bridge
#
interface Ten-GigabitEthernet0/0/10
port link-mode bridge
#
interface Ten-GigabitEthernet0/0/11
port link-mode bridge
#
security-zone name Local
#
security-zone name Trust
#
security-zone name DMZ
#
security-zone name Untrust
#
security-zone name Management
#
scheduler logfile size 16
#
line class console
user-role network-admin
#
line class vty
user-role network-operator
#
line con 0
user-role network-admin
#
line vty 0 63
authentication-mode scheme
user-role network-operator
#
ip route-static 0.0.0.0 0 Dialer1
#
ntp-service enable
ntp-service unicast-server 172.19.99.100
#
acl basic 2245
rule 1 permit source object-group _web_manageTelnet_group_
#
acl advanced name WebPing65541
rule 1 deny icmp icmp-type echo
#
password-control enable
undo password-control aging enable
undo password-control history enable
password-control length 6
password-control login-attempt 3 exceed lock-time 10
password-control update-interval 0
password-control login idle-time 0
#
domain name system
#
domain default enable system
#
role name level-0
description Predefined level-0 role
#
role name level-1
description Predefined level-1 role
#
role name level-2
description Predefined level-2 role
#
role name level-3
description Predefined level-3 role
#
role name level-4
description Predefined level-4 role
#
role name level-5
description Predefined level-5 role
#
role name level-6
description Predefined level-6 role
#
role name level-7
description Predefined level-7 role
#
role name level-8
description Predefined level-8 role
#
role name level-9
description Predefined level-9 role
#
role name level-10
description Predefined level-10 role
#
role name level-11
description Predefined level-11 role
#
role name level-12
description Predefined level-12 role
#
role name level-13
description Predefined level-13 role
#
role name level-14
description Predefined level-14 role
#
user-group system
#
local-user admin class manage
service-type telnet http
authorization-attribute user-role network-admin
#
security-enhanced level 1
#
undo ssl renegotiation disable
undo ssl version ssl3.0 disable
ssl version gm-tls1.1 disable
undo ssl version tls1.3 disable
undo ssl version tls1.0 disable
undo ssl version tls1.1 disable
undo ssl version tls1.2 disable
#
security-zone intra-zone default permit
#
ip http enable
web idle-timeout 30
#

#
cloud-management server domain cloudnet.h3c.com
#
return

400的小哥帮忙解决了,升级到9141P27,就都可以了

zhiliao_fELWp 发表时间:2025-12-20 更多>>

400的小哥帮忙解决了,升级到9141P27,就都可以了

zhiliao_fELWp 发表时间:2025-12-20
粉丝:1人 关注:0人

单出口没啥配置问题,可以升级版本看一下,不行只能抓包看了;公网访问不要用80端口

1、当前这个软件版本应该是最新的吧? 2、公网端口都避开了80这些特殊端口。

zhiliao_fELWp 发表时间:2025-12-20 更多>>

1、当前这个软件版本应该是最新的吧? 2、公网端口都避开了80这些特殊端口。

zhiliao_fELWp 发表时间:2025-12-20
粉丝:2人 关注:0人

你这个是Dialer口,Dialer获取的地址有可能是运营商内网地址,有尝试过公网测ping你获取的出口地址吗?

编辑答案

你正在编辑答案

如果你要对问题或其他回答进行点评或询问,请使用评论功能。

分享扩散:

提出建议

    +

亲~登录后才可以操作哦!

确定

亲~检测到您登陆的账号未在http://hclhub.h3c.com进行注册

注册后可访问此模块

跳转hclhub

你的邮箱还未认证,请认证邮箱或绑定手机后进行当前操作

举报

×

侵犯我的权益 >
对根叔社区有害的内容 >
辱骂、歧视、挑衅等(不友善)

侵犯我的权益

×

泄露了我的隐私 >
侵犯了我企业的权益 >
抄袭了我的内容 >
诽谤我 >
辱骂、歧视、挑衅等(不友善)
骚扰我

泄露了我的隐私

×

您好,当您发现根叔知了上有泄漏您隐私的内容时,您可以向根叔知了进行举报。 请您把以下内容通过邮件发送到pub.zhiliao@h3c.com 邮箱,我们会尽快处理。
  • 1. 您认为哪些内容泄露了您的隐私?(请在邮件中列出您举报的内容、链接地址,并给出简短的说明)
  • 2. 您是谁?(身份证明材料,可以是身份证或护照等证件)

侵犯了我企业的权益

×

您好,当您发现根叔知了上有关于您企业的造谣与诽谤、商业侵权等内容时,您可以向根叔知了进行举报。 请您把以下内容通过邮件发送到 pub.zhiliao@h3c.com 邮箱,我们会在审核后尽快给您答复。
  • 1. 您举报的内容是什么?(请在邮件中列出您举报的内容和链接地址)
  • 2. 您是谁?(身份证明材料,可以是身份证或护照等证件)
  • 3. 是哪家企业?(营业执照,单位登记证明等证件)
  • 4. 您与该企业的关系是?(您是企业法人或被授权人,需提供企业委托授权书)
我们认为知名企业应该坦然接受公众讨论,对于答案中不准确的部分,我们欢迎您以正式或非正式身份在根叔知了上进行澄清。

抄袭了我的内容

×

原文链接或出处

诽谤我

×

您好,当您发现根叔知了上有诽谤您的内容时,您可以向根叔知了进行举报。 请您把以下内容通过邮件发送到pub.zhiliao@h3c.com 邮箱,我们会尽快处理。
  • 1. 您举报的内容以及侵犯了您什么权益?(请在邮件中列出您举报的内容、链接地址,并给出简短的说明)
  • 2. 您是谁?(身份证明材料,可以是身份证或护照等证件)
我们认为知名企业应该坦然接受公众讨论,对于答案中不准确的部分,我们欢迎您以正式或非正式身份在根叔知了上进行澄清。

对根叔社区有害的内容

×

垃圾广告信息
色情、暴力、血腥等违反法律法规的内容
政治敏感
不规范转载 >
辱骂、歧视、挑衅等(不友善)
骚扰我
诱导投票

不规范转载

×

举报说明