[互聯(lián)網(wǎng)]netscreenstudy-資料下載頁
2025-02-22 00:59本頁面
【正文】 ?? 1. Policy Based NAT ?? Source NAT , Destination NAT ?? 2. ??? Authentication ? ???? ? 3. ??? ??? Policy ? ?? Bandwidth ???? ?? 4. Schedule ??? ?? ?????? ??? ??? ??? ?? : Schedule ???? 5. ?? ??? ??? OK ??? ??? Policy ? ???? . 25. Policy Setting Policy Setting 1 2 3 4 5 51 Policies New Destination Address Multiple 25. Policy Setting MultiCell Policy Setting ? Address ? Service Object ?? ?? ??? ‘Multiple’ ??? ??? ?? ??? ?? ?? ?? Object ? ??? Policy ? ?? ??? ? Object Grouping ?? ????? ???? Available Members ? ?? Selecting Members ? ????? ? 52 25. Policy Setting MultiCell Policy Setting Address Grouping? ?? ???? ? MultiObject ???? ? ? ?? ? ??? Address Grouping ? ?? ??? ??? ??? MultiObject ? ?? ??? ??? ??? ??? ???? . ? ? ?? ?? ??? ??? ?? ??? ?? ?? Address ? Grouping ? ??? ????? ??? ???? ???? ?? ?? ? ?? List ? ?? ??? Policy ???? ? ??? ??? ???? ??? MultiCell Policy ? ??? 53 Policies ??? ??? ?? ??? from ? ‘a(chǎn)ll zone’ to ? ‘a(chǎn)ll zone’?? ??? ? , Go ? ???? ? ? ?? . ? Policy ? Zone ?? ?? ???? . 25. Policy Setting Policy ?? 54 Policies Move Policy ??? ?? , ????? ???? , ???? ??? ?? ??? ???? Policy? ???? . ????? ??? ??? ?? Move ?? ???? ???? ??? ?? ?? . Move Location ? ???? ???? Policy? ????? ???? ?? ? ? ?? . 25. Policy Setting Policy ???? 55 Policies Policy? ????? ? ?? Edit? , ??? ? ?? Remove? ???? ??? ???? . ?? ??? Policy ? ??? ? Clone ? ???? ???? ??? ? ?? . 25. Policy Setting Policy ?? ?? ?? 56 6. 命令行配置 CLI Command 57 NetScreen 防火 墻 CLI 基本配置命令 語 法 : ? get 查 看命令 ? set 系 統(tǒng)設(shè) 置命令 ? unset 刪 除 設(shè) 置 ? save 保存配置文件 ? exit 退出 CLI配置 頁 面 Console ? clear 清 空 當(dāng) 前 動態(tài)輸 出信息 ? reset 清 空防火 墻 配置 ? ping 主機(jī) ping測試 ? traceroute 主機(jī) Trace Route測試 ? exec System Command? ?? ? Netscreen防火 墻 支持命令 幫 助 ,可以通 過 在相 關(guān) 命令后 輸 入 ”?”來查詢 具體的命令 。 ex) set interface ? set admin ? CLI Command 58 1) 查 看防火 墻 Configuration文件 fw get config Total Config size 22330: set auth type 0 set auth timeout 10 set clock dstoff set clock timezone 9 set admin format dos set admin name screen set admin password nKVUM2rwMUzPcrkG5sWIHdCtqkAibn set admin user admin password nNwVKDreO5/Gc4fOWsvN/3MtvuCNDn privilege all set admin port 8081 set admin tel port 2324 set admin auth timeout 0 set admin auth type Local 59 2) 查 看 Interface狀態(tài) fw get interface fw get interface eth1 fw get interface v1untrust Interface: Name IP Address Zone MAC VLAN Status vlan1 MGT up v1trust v1untrust v1dmz Ether1 Ether2 Ether3 ha1 ha2 60 3) System IP, HTTP/ Tel Port, EMail Traffic Log 查 看 fw get admin System IP: HTTP Port: 8081, HTTPS Port: 443 TELNET Port: 2324, SCS Port: 22 No Mng Host IP is specified Mail Alert: Off, Mail Server: EMail Address: EMail Traffic Log: Off Configuration Format: DOS Device Reset: Enabled Hardware Reset: Disabled 61 4) Serial number, SW Version, UpTime, Interface IP 查 看 fw get system Product Name: NS204 Serial Number: 0010052022000011, Control Number: 00000000 Hardware Version: 4110(0), FPGA checksum: 00000000(0) Software Version: , Type: Firewall+VPN File Name: , Checksum: da879226 Date 12/09/2022 19:07:35, Daylight Saving Time disabled The Network Time Protocol is Disabled Up 116 hours 2 minutes 4 seconds Since 12 Nov 2022 18:05:31 Total Device Resets: 0 …………………… …………………… 62 5) Routing 路由的配置 * Syntax * Example ? 查 看路由信息 fw get route ? 添加一 條靜態(tài) 路由 fw set route interface eth1 gateway ? 刪 除一 條靜態(tài) 路由 fw unset route Set route interface {trust | untrust | dmz | v1trust | v1untrust | v1dmz} [gateway ipaddr [metric number]]
教學(xué)課件相關(guān)推薦
鄂ICP備17016276號-1