资源描述：
《防火墙初级动手配置》由会员上传分享，免费在线阅读，更多相关内容在教育资源-天天文库。
1、防火墙初级 动手配置2007.Mar议程系统管理透明模式路由模式安全策略地址翻译应用层和网络层防攻击系统管理系统组成所有关键的系统功能都在内存中运行。可以通过控制线和WebUI对防火墙的配置进行修改。TablesBuffersRunningConfigScreenOS(active)ScreenOSImageSavedConfigCerts,etc.RAMFlashInterf.Interf.Interf.TFTP@PwrUp/ResetAux.StorageWebUINetScreenAux.Mgt.ServersDNS/SyslogConsole“Get”“Set”ns
2、208->getsystemProductName:NS208SerialNumber:0043042002000034,ControlNumber:00000000HardwareVersion:0110(0)-(11),FPGAchecksum:00000000,VLAN1IP(0.0.0.0)SoftwareVersion:5.0.0.0,Type:Firewall+VPNBaseMac:0010.db1d.1c30FileName:n200-LAS0z0ad,Checksum:00000000Date04/15/200322:06:53,DaylightSaving
3、TimeenabledTheNetworkTimeProtocolisDisabledUp2hours31minutes14secondsSince15Apr200319:35:39TotalDeviceResets:0SysteminNAT/routemode.UseinterfaceIP,ConfigPort:80UserName:netscreenInterfaceethernet1:number0,if_info0,if_index0,modenatlinkup,phy-linkup/full-duplexvsysRoot,zoneTrust,vrtrust-vrd
4、hcpdisabled*ip1.1.1.1/24mac0010.db1d.1c30*manageip1.1.1.1,mac0010.db1d.1c30---more---显示状态信息-CLIIntheCLI,getcommandsprovidevaluablestatusaboutoperationalconditions:SystemserialnumberSoftwareversionOperatingmodeInterfacestatusInterfaceaddressManagementaddresses图形化界面-WebUINetScreen防火墙可以通过图形化的
5、界面进行管理。需要的条件(ie.oneIPaddress)一台PC机与防火墙在同一个网段口令保护Zone和Interface的分配AstricthierarchicallinkageexistsbetweenzonesandinterfacesinaNetScreendeviceZonesareassignedtoavirtualrouterInterfacesareassignedtoasecurityzoneAninterfacecanonlybelongtoonesecurityzoneIndividualconfigurationparametersareassig
6、nedtointerfacesIPaddressesManagementservicesOthersInt.ZoneZoneVirtualRouterVRZoneInt.IPZone的类型安全zonePre-defined:Trust,Untrust,DMZ;V1-Trust,V1-Untrust,V1-DMZUser-definedTunnelZone功能ZonesNullMGTHASelfVLANns5gt->getzoneTotal10zonescreatedinvsysRoot-5arepolicyconfigurable.Totalpolicyconfigurab
7、lezonesforRootis5.------------------------------------------------------------------------IDNameTypeAttrVRDefault-IFVSYS0NullNullShareduntrust-vrhiddenRoot1UntrustSec(L3)Sharedtrust-vruntrustRoot2TrustSec(L3)trust-vrtrustRoot4SelfFunctrust-vrselfRoot5MGTFunctr
