华三防火墙配置例子（hua three firewall configuration example）

《华三防火墙配置例子（hua three firewall configuration example）》由会员上传分享，免费在线阅读，更多相关内容在教育资源-天天文库。

1、华三防火墙配置例子（Huathreefirewallconfigurationexample）华三防火墙配置例子#sysnamequidway#superpasswordlevel3cipherxxxxxxx#ftpserverenable#dvpnserviceenable#firewallpacketfilterenable#firewallurlfilterparameteraddselect^^firewallurlfilterparameteradd20^^firewallurlfilterpa

2、rameteradd/update.firewallurlfilterparameteraddanddelete.firewallurlfilterparametertotheadd/drop.firewallurlfilterparameteradd...firewallurlfilterparameteradd"firewallurlfilterparameteraddexec^^firewallurlfilterparameteradd%27#firewallstatisticsystemenabl

3、e#firewalldefendipspoofingfirewalldefendsmurffirewalldefendpingofdeathfirewalldefendportscanfirewalldefendarpspoofing.firewalldefendarp-floodfirewalldefendicmp-floodenable#radiusschemesystem#domainsystem#localuseradminpasswordcipherxxxxxxservicetypetelnet

4、terminal#aspfpolicy1detecth323detectrtspdetecthttpdetectsmtpdetectftpdetecttcpdetectudp#interfaceethernet1/0ipaddress192.168.100.1255.255.255.0firewallpacketfilter3000inboundfirewallpacketfilter3000outbound#interfaceethernet1/1#interfaceethernet1/2#interf

5、aceethernet1/3#interfaceethernet1/4#interfaceethernet2/0speed10duplexfullipaddressx.x.x.x255.255.255.0firewallpacketfilterinbound2001firewallaspf1outboundnatoutbound2000#interfacenull0#aclnumber2000rule0denysource192.168.6.00.0.0.255rule1denysource192.168

6、.5.00.0.0.255aclnumber2001rule0deny#aclnumber3000rule0denyudpdestinationporteqtftprule1denytcpdestinationporteq4444rule2denytcpdestinationporteq135rule3denyudpdestinationporteq135rule4denyudpdestinationporteqnetbios-nsrule5denyudpdestinationporteqnetbios-

7、effortstorule6denytcpdestinationporteq139rule7denyudpdestinationporteqnetbios-ssn规则8拒绝TCP目的端口情商445规则9否认UDP目的端口情商445规则10否认UDP目的端口情商593规则11拒绝TCP目的端口情商593规则12拒绝TCP目的端口情商5554规则13拒绝TCP目的端口情商9995规则14拒绝TCP目的端口情商9996规则15否认UDP目的端口情商1434#防火墙的本地区域设置优先级为100#防火墙的信任区域添

8、加界面功能/0设置优先级为85#防火墙的信任区添加界面ethernet2/0设置优先级为5#防火墙DMZ区设置优先级为50#防火墙区间局部信任#防火墙区间当地不可信#当地的DMZ防火墙区间#防火墙区间信任不信任#DMZ防火墙间的信任#防火墙DMZ不可信区间#静态路由192.168.2.0255.255.255.0192.168.100.254偏好60静态路由192.168.3.0255.255.255.0192.168.100