華為三層交換機(jī)配置步驟解釋資料-資料下載頁(yè)
2025-04-08 22:04本頁(yè)面
【正文】 。 firewall zone untrust set priority 5 add interface GigabitEthernet0/0/1 firewall interzone trust untrust packetfilter 3000 inbound packetfilter 2000 outbound nat outbound 2000 addressgroup 0 detect ftp detect return 限制互訪 （為內(nèi)網(wǎng)地址與2網(wǎng)段通，與3網(wǎng)段不通）[Switch] acl 3001[Switchacladv3001] rule 5 permit ip source dest [Switch] acl 3002[Switchacladv3002] rule 5 permit ip source dest 在Switch上創(chuàng)建流分類c匹配規(guī)則分別為ACL 3001[Switch] traffic classifier c1[Switchclassifierc1] ifmatch acl 3001[Switch] traffic classifier c2[Switchclassifierc1] ifmatch acl 3002[Switchclassifierc1] quit在Switch上創(chuàng)建流行為b[Switch] traffic behavior b1[Switchbehaviorb1] permit[Switchbehaviorb1] quit在Switch上創(chuàng)建流行為b[Switch] traffic behavior b2[Switchbehaviorb2] deny[Switchbehaviorb2] quit在Switch上創(chuàng)建流策略p1，將流分類和對(duì)應(yīng)的流行為進(jìn)行綁定。[Switch] traffic policy p1Switchtrafficpolicyp1] classifier c1 behavior b1[Switchtrafficpolicyp1] classifier c2 behavior b2[Switchtrafficpolicyp1] quit將流策略p1應(yīng)用到接口VLAN 10。（接口為數(shù)據(jù)流進(jìn)入設(shè)備方向）[Switch] vlan 10[Switchvlan10] trafficpolicy p1 inbound[Switchvlan10] quit
公司管理相關(guān)推薦
鄂ICP備17016276號(hào)-1