配置juniper-ssg(編輯修改稿)
2024-09-14 17:07 本頁面
【文章內容簡介】 creen synackackproxyset zone Untrust screen blockfragset zone Untrust screen limitsession destinationipbasedset zone Untrust screen icmpidset zone V1Untrust screen teardropset zone V1Untrust screen synfloodset zone V1Untrust screen pingdeathset zone V1Untrust screen ipfiltersrcset zone V1Untrust screen landset zone Untrust screen limitsession sourceipbased 512set zone Untrust screen limitsession destinationipbased 512set interface ethernet0/0 zone Trustset interface ethernet0/1 zone V1Trustset interface ethernet0/2 zone V1Trustset interface ethernet0/8 zone Untrustset interface ethernet0/9 zone Untrust兩條互聯(lián)網在一個區(qū)域set interface ethernet0/0 ip set interface ethernet0/0 nat內網口啟動NAT，去往untrust區(qū)或dmz區(qū)都 會觸發(fā)nat，除非把防火墻配成透傳模式unset interface vlan1 ipset interface ethernet0/8 ip set interface ethernet0/8 routeset interface ethernet0/9 ip set interface ethernet0/9 routeunset interface vlan1 bypassothersipsecunset interface vlan1 bypassnonipset interface ethernet0/9 manageip set interface ethernet0/0 ip manageableset interface ethernet0/8 ip manageableset interface ethernet0/9 ip manageableset interface ethernet0/8 manage pingset interface ethernet0/8 manage telnetset interface ethernet0/8 manage webset interface ethernet0/9 manage pingset interface ethernet0/9 manage telnetset interface ethernet0/9 manage webserver auto detection開啟，防火墻會自動ping這臺內部地址，如果無法通信，status就是down
范文總結相關推薦
鄂ICP備17016276號-1