以下就是最基本的命令。我使用的是MSR3016修改而成。适用于H3C-MSR/SR/AR系列路由器。#acl number 3000rule 1 permit ip source 192.168.0 0.255.255.255rule 10 deny ip #dhcp server ip-pool 1 network 192.168.0 mask 255.255.255.0 gateway-list 192.168.1dns-list 202.96.64.68//自己改成本地DNSexpired unlimited#interface Ethernet0/0 port link-mode route nat outbound 3000 descripqion TO_waiwang-WAN ip address 10.82.97 255.0#interface Ethernet0/1 port link-mode route descripqion TO_neiwang-LAN ip address 192.168.1 255.255.255.0# ip route-static 0.0 0.0 10.82.x//修改成外网的网关# dhcp server forbidden-ip 192.168.1 # dhcp enable #