路由器、防火墙、三层环境下架设透明网关的问题

Epsilon

我们现在用的网关是192.168.0.9   我现在想用bsd做透明网关，那位大哥指点下小弟，

我参考了很多文章，没能解决，所以才发上来请大家帮帮忙，谢谢大家

我先说下我们的网络结构

路由器：FastEthernet0/0 ip address: 111.111.64.210 255.255.255.252
                FastEthernet0/1 ip address: 111.111.83.113 255.255.255.248
                ip route 0.0.0.0 0.0.0.0 111.111.64.209
                ip route 0.0.0.0 0.0.0.0 111.111.83.114

防火墙：nameif  ethernet0 outside security0
                nameif  ethernet1 inside security100
                nameif  ethernet2 dmz security50
                ip address outside 111.111.83.114 255.255.255.248
                ip address inside 192.168.0.254    255.255.254.0
                ip address dmz    172.16.0.1          255.255.255.0
                failover   ip address   outside 0.0.0.0
                failover   ip address   inside  0.0.0.0
                failover   ip address   dmz     0.0.0.0
                global(outside)  1   111.111.83.115
                nat (inside)    1   0.0.0.0   0.0.0.0
                nat (dmz)       1   0.0.0.0   0.0.0.0
                route   outside   0.0.0.0   0.0.0.0   111.111.83.113  1
                route   inside     0.0.0.0   0.0.0.0    192.168.0.9   2
交换机：

ip subnet-zero
!
spanning-tree extend system-id
!
!
interface GigabitEthernet1/1
!
interface GigabitEthernet1/2
!
interface GigabitEthernet2/1
!
interface GigabitEthernet2/2
switchport access vlan 40
!
interface GigabitEthernet2/3
!
interface GigabitEthernet2/4
switchport access vlan 50
!
interface GigabitEthernet2/5
!
interface GigabitEthernet2/6
!
interface GigabitEthernet2/7
!
interface GigabitEthernet2/8
!
interface GigabitEthernet2/9
!
interface GigabitEthernet2/10
!
interface GigabitEthernet2/11
!
interface GigabitEthernet2/12
switchport access vlan 60
!
interface GigabitEthernet2/13
!
interface GigabitEthernet2/14
switchport access vlan 10
switchport mode access
!
interface GigabitEthernet2/15
!
interface GigabitEthernet2/16
!
interface GigabitEthernet2/17
!
interface GigabitEthernet2/18
!
interface GigabitEthernet3/1
switchport access vlan 30
!
interface GigabitEthernet3/2
!
interface GigabitEthernet3/3
!
interface GigabitEthernet3/4
!
interface GigabitEthernet3/5
!
interface GigabitEthernet3/6
!
interface GigabitEthernet4/1
!
interface GigabitEthernet4/2
!
interface GigabitEthernet4/3
!
interface GigabitEthernet4/4
!
interface GigabitEthernet4/5
!
interface GigabitEthernet4/6
switchport access vlan 20
!
interface GigabitEthernet5/1
switchport access vlan 100
switchport mode access
!
interface GigabitEthernet5/2
switchport access vlan 100
switchport mode access
!
interface GigabitEthernet5/3
switchport access vlan 100
!
interface GigabitEthernet5/4
switchport access vlan 70
!
interface GigabitEthernet5/5
!
interface GigabitEthernet5/6
!
interface Vlan1
ip address 192.168.0.9 255.255.254.0
!
interface Vlan10
ip address 192.168.10.254 255.255.255.0
!
interface Vlan20
ip address 192.168.20.254 255.255.255.0
!
interface Vlan30
ip address 192.168.30.254 255.255.255.0
!
interface Vlan40
ip address 192.168.40.254 255.255.255.0
!
interface Vlan50
ip address 192.168.50.254 255.255.255.0
!
interface Vlan60
ip address 192.168.60.254 255.255.255.0
!
interface Vlan70
ip address 192.168.70.254 255.255.255.0
!
interface Vlan80
ip address 192.168.80.254 255.255.255.0
!
interface Vlan90
ip address 192.168.90.254 255.255.255.0
!
interface Vlan100
ip address 192.168.100.254 255.255.255.0
!
ip classless
ip route 0.0.0.0 0.0.0.0 192.168.0.254
no ip http server
!
!
!
!

剑心通明

在防火墙上做不行吗？

Epsilon

主要是我想用ipf+squid做，顺便用squid做些限制阿  

现在网络中的p2p之类的软件太多了   想做些限制  本来想在路由器上做  

但那样负载太大  怕把路由器暴了   用的是cisco2621   

现在网络中机器同时开机的话大概有4、5百左右   我们这里是10m的电信光纤

嘿  请老大指点下小弟

[ 本帖最后由 Epsilon 于 2006-4-3 11:36 编辑 ]

Epsilon

??????????????????????????????????????????????????????????

echee

为何不用pf+squid

Epsilon

但我该怎样把我的机器设置成默认网关呢？