路由器防火墙

路由器器上做DHCP：

Ipnatpool地址池名称起始外网IP结束外网IPnetmask子网掩码

Ipnatinsidesourcelist1pool地址池名称overload

interface内网接口

ipaddress内网网关内网子网掩码

Ipnatinside

interface外网接口

ipaddress外网地址外网子网掩码

ipnatoutside

iproute0.0.0.00.0.0.0外网地址

access-list1permit内网网段内网反掩码

防火墙上做DHCP：

interfaceGigabitEthernet0/0

nameifoutside

curity-level0

ipaddress外网IP地址子网掩码

interfaceGigabitEthernet0/1

nameifinside

curity-level100

ipaddress内网IP地址子网掩码

ftpmodepassive

access-list101extendedpermittcpanyanyeqwww

access-list101extendedpermittcpanyanyeqftp

access-list102extendedpermitipanyany

access-list102extendedpermiticmpanyany

global(outside)1interface定义一个外网出口

nat(inside)10.0.0.00.0.0.0允许的内网网段转换外网IP

access-group101ininterfaceoutside

access-group102ininterfaceinside

routeoutside0.0.0.00.0.0.0外网接口地址1

routeinsdie内网网段内网子网掩码

httprverenable开启http

http192.168.1.0255.255.255.0inside开启内网口

dhcpdaddressdhcp起始地址-dhcp结束地址inside

dhcpddns首选dns备用dnsinterfaceinside

dhcpdenableinside

交换机上做DHCP：

ipdhcprver

ipdhcppool地址池名称

network网段子网掩码

dnsrver网关

default-route

ipdhcpexcluded-address起始地址结束地址不非配的网段