Setting up Huawei Agent routing in Intranet

One, the internal LAN all use the private address on the network, under the normal circumstances, the internal computer in the direct use route external access, will because the computer uses is the Internet reservation address, but is filtered by the router, thus causes cannot access the Internet resources, The solution to this problem is to use the NAT address translation function provided by the routing operating system to convert the private address of Intranet to the legal address on the Internet, so that users without legal IP address can access the external network through NAT. The benefit of this is the need to have a proxy server, reduce investment, save legitimate IP addresses, and improve the security of your internal network.

Second, the use of NAT single mode, like its name, you can map a large number of local LAN hosts to a network address. All the hosts within the LAN are regarded as a network user for the external network network. Hosts on the local LAN continue to use local addresses.

Third, the global model using NAT, the router's interface maps many local LAN hosts to a certain network address range, and when the local host port is connected to a host on the network, an IP address in the IP address pool is automatically assigned to the local host, and the IP address that is dynamically assigned after the connection is interrupted is released. The released IP address can be used by other local host, require static IP address, set in TCP/IP properties, and set off network for the router Ethernet port IP address, set DNS for the access provider's address, browser and other Internet tools without making any special settings.

Using proxy server to access network resources, the advantage is that the cache service provided by proxy server can be used to improve the speed and efficiency of network access. More suitable for the use of more computer units. The disadvantage is that a computer should be dedicated as a proxy server, increased investment costs, and more than the first law to occupy more than two legal IP address, network security is not high, the use of this scheme to access the Internet, Proxy Server installed two network cards, a connection to the internal network, set up the internal private address, Another connection router Ethernet port, set up the legal address of unicom allocation, router Ethernet port also set up the legitimate IP address allocation, the device will be connected to the proxy server installed agent software, and the computer set up agents to access the network.

Five, through the two methods described above to configure, can smoothly achieve network access, but each method has advantages, there are some shortcomings, and the advantages of the two methods are complementary. The two methods can not be combined to combine the advantages of the three is a fish and bear's paw can be a solution. Integration of the advantages of the one or two two methods, that is, to save the IP address, but also through the cache provided by proxy server to improve the access efficiency of the network.

Vi. using this scheme to access the Internet, the device connection method is as follows: The proxy server installs two network cards, two network cards are connected on the switch, when sets the IP address, two network cards all set the internal private address, but these two addresses should not belong to one network, a piece is used to communicate with the intranet, a piece is used to communicate with the router, Otherwise the proxy cannot be implemented. Do not install the NetBEUI protocol on the proxy server, install TCP/IP protocol only, router Ethernet port also set an internal private address, which is in the same network as the address of network card 2.

Seven, in this configuration, the computer can be set up by proxy Internet access, but also through the setting gateway directly to the Internet. If only through the proxy Internet, set method and method two completely consistent, if only through the gateway to the Internet, the computer must set up a static IP address, IP address should be set to 192.168.1.X, and the router Ethernet port in the same network segment, and set the gateway to 192.168.1.1, set the address that DNS provides to the provider, you need to set two static IP addresses 192.168.0.X and 192.168.1.X in TCP/IP, and set the gateway to: 192.168.1.1, the address that DNS provides to the access provider. You can switch between agents and gateways by simply turning on or off proxy settings in software such as browsers.

The above is the internal network set up Huawei Agent routing detailed steps, as long as the above method to set up, then you will be successful, here we have to pay attention to the setting of the router must be careful to avoid a small one step error, resulting in the entire network is not through.