Clavister E7 CLI 配置手册

《Clavister E7 CLI 配置手册》由会员上传分享，免费在线阅读，更多相关内容在行业资料-天天文库。

1、ClavisterE7CLI配置手册Writtenbysuntengfei1部署环境公司有一ClavisterE7台防火墙,内网口G1连接二层交换机,交换机有两个VLAN,分别是VLAN7与VLAN8。外网口G2为ADSL线路。VLANID作用7客户端8服务器注：E7默认情况下1号口为管理口，IP地址为192.168.1.1，帐号密码为admin。2防火墙配置命令参考允许远程接入Device:/>setRemoteManagementRemoteMgmtHTTPrmgmt_httpNetwork=management_netInte

2、rface=If2添加主机Device:/>addAddressIP4Addresswww_srv1Address=192.168.10.16添加网络Device:/>addAddressIP4AddresswwwsrvnetAddress=192.168.10.0/24VLAN接口命令Device:/>addInterfaceVLANVLAN10Ethernet=lanIP=vlan10_ipNetwork=all-netsVLANID=10PPOE接口Device:/>addInterfacePPPoETunnelPPPoECl

3、ientEthernetInterface=wanNetwork=all-netsUsername=exampleuserPassword=examplepw添加静态路由Changethecontexttobetheroutingtable:Device:/>ccRoutingTablemainAddtheroute:Device:/main>addRouteInterface=wanNetwork=all-netsGateway=isp_gw_ip添加防火墙策Device:/>addIPRule略Action=AllowServi

4、ce=httpSourceInterface=lanSourceNetwork=lan_netDestinationInterface=wanDestinationNetwork=all-netsName=lan_http添加NATDevice:/>addIPRuleAction=NATSourceInterface=lanSourceNetwork=lan_netDestinationInterface=wanDestinationNetwork=all-netsService=httpNATAction=UseInterface

5、AddressName=NAT_HTTP应用新的配置Device:/>activateDevice:/>commit2.1接口配置2.1.1内网口配置由于G1内网口要承载两个VLAN，二层交换机与G1通过Trunk互联。Device:/>addInterfacevlanvlan7Ethernet=g1IP=192.1.7.253Network=192.1.7.0/24VLANID=7/配置VLAN7到防火墙的G1口Device:/>addInterfacevlanvlan8Ethernet=g1IP=192.1.8.254Netwo

6、rk=192.1.7.0/24VLANID=8/配置VLAN8到防火墙的G1口查看接口配置Device:/>showInterfaceDefaultInterfaceNameComments------------anycoreEthernetNameIPNetworkDefaultGatewayDHCPEnabled--------------------------------------------------------------------G1InterfaceAddresses/G1_ipI

7、nterfaceA...InterfaceAdd...NoG2InterfaceAddresses/G2_ipInterfaceA...NoG3InterfaceAddresses/G3_ipInterfaceA...NoGESWInterfaceAddresses/GE...InterfaceA...NoGRETunnel(Empty)InterfaceGroupNameMembers--------------WANZoneG1IPsecTunnel(Empty)L2TPClient(E

8、mpty)L2TPServer(Empty)L2TPv3Server(Empty)LinkAggregation(Empty)LoopbackInterface(Empty)PPPoETunnel(Empty)SSLVPNInterf