H3C防火墙配置例.pdf

《H3C防火墙配置例.pdf》由会员上传分享，免费在线阅读，更多相关内容在行业资料-天天文库。

1、2012/11/89:531#2sysnameH3C3#4firewallpacket-filterenable5firewallpacket-filterdefaultpermit6#7insulate8#9nataddress-group0222.92.223.107222.92.223.108//ISP分配的固定IP地址池10#11firewallstatisticsystemenable12#13DNSserver61.177.7.1//ISPDNS14#15radiusschemesystem16server-t

2、ypeextended17#18domainsystem19authenticationnone20authorizationnone21accountingnone22#23local-useradmin24passwordsimpleadmin0fnoah25service-typetelnetterminal26level327service-typeftp28#29aclnumber200130rule0permitsource192.168.50.00.0.0.25531#32interfaceAux033asy

3、ncmodeflow34#35interfaceEthernet0/036ipaddress192.168.50.254255.255.255.0//内网口IPcnwan.com.cn37#38interfaceEthernet0/139#40interfaceEthernet0/241#42interfaceEthernet0/343#44interfaceEthernet0/445ipaddress222.92.223.110255.255.255.248//公网口IP46natoutbound2001address-

4、group0//启用NAT47natserverprotocoltcpglobal222.92.223.107wwwinside192.168.50.11www//端口映射48natserverprotocoltcpglobal222.92.223.1078080inside192.168.50.11808049natserverprotocoltcpglobal222.92.223.1073389inside192.168.50.11338950natserverprotocoltcpglobal222.92.223.1

5、08wwwinside192.168.50.10www51natserverprotocoltcpglobal222.92.223.1088080inside192.168.50.10808052natserverprotocoltcpglobal222.92.223.1083389inside192.168.50.10338953#54interfaceEncrypt1/055#56interfaceNULL05758#59firewallzonelocal60setpriority10061#62firewallzon

6、etrust63addinterfaceEthernet0/0//内网口加入安全域64setpriority8565#66firewallzoneuntrust67addinterfaceEthernet0/468setpriority569#70firewallzoneDMZ71setpriority5072#73firewallinterzonelocaltrust74#75firewallinterzonelocaluntrust76#页1共22012/11/89:5377firewallinterzonelocal

7、DMZ78#79firewallinterzonetrustuntrust80#81firewallinterzonetrustDMZ82#83firewallinterzoneDMZuntrust84#85FTPserverenable86#87iproute-static0.0.0.00.0.0.0222.92.223.105preference60//路由88#89user-interfacecon090user-interfaceaux091user-interfacevty0492authentication-m

8、odescheme93#页2共2