Multi-WAN NAT Lab: Policy Routing, Portal Auth, and DNS Hairpinning on Huawei USG
Topology Overview
The lab consists of three security zones—Office, Production, and Guest—plus a DMZ that hosts an HTTP server. Two ISPs provide Internet acccess: China-Telecom (12.0.0.0/24) and China-Mobile (21.0.0.0/24). A branch office connects through a separate firewall that must reach the DMZ server through either ISP link.
High-Level Requ ...
Posted on Sun, 13 Sep 2026 16:50:12 +0000 by twilson