華為usg系列ipsec-vpn實(shí)施經(jīng)驗(yàn)總結(jié)-資料下載頁(yè)
2025-06-16 04:29本頁(yè)面
【正文】 trust direction outbound firewall packetfilter default permit interzone local dmz direction inbound firewall packetfilter default permit interzone local dmz direction outbound firewall packetfilter default permit interzone trust untrust direction inbound firewall packetfilter default permit interzone trust untrust direction outbound firewall packetfilter default permit interzone trust dmz direction inbound firewall packetfilter default permit interzone trust dmz direction outbound firewall packetfilter default permit interzone dmz untrust direction inbound firewall packetfilter default permit interzone dmz untrust direction outboundl2fwdfast enableacl number 3001 rule 5 permit ip source destination ike proposal 10 authenticationalgorithm md5ike peer a exchangemode aggressive presharedkey 123456 ikeproposal 10 undo version 2 localidtype name remoteaddress nat traversalipsec proposal tran1 esp authenticationalgorithm sha1ipsec policy map1 10 isakmp security acl 3001 ikepeer a proposal tran1 interface Vlanif1 ip address interface Cellular5/0/0 linkprotocol pppinterface Ethernet0/0/0ip address ipsec policy map1interface Ethernet1/0/0 portswitch port linktype accessinterface Ethernet1/0/1 portswitch port linktype access interface Ethernet1/0/2 portswitch port linktype accessinterface Ethernet1/0/3 portswitch port linktype accessinterface Ethernet1/0/4 portswitch port linktype accessinterface Ethernet1/0/5 portswitch port linktype accessinterface Ethernet1/0/6 portswitch port linktype accessinterface Ethernet1/0/7 portswitch port linktype accessinterface Ethernet2/0/0interface NULL0firewall zone local set priority 100firewall zone trust set priority 85 detect ftp add interface Ethernet1/0/0 add interface Ethernet1/0/1 add interface Ethernet1/0/2 add interface Ethernet1/0/3 add interface Ethernet1/0/4 add interface Ethernet1/0/5 add interface Ethernet1/0/6 add interface Ethernet1/0/7 add interface Vlanif1firewall zone untrust set priority 5 detect ftp add interface Ethernet0/0/0 add interface Ethernet2/0/0 ip routestatic natpolicy interzone trust untrust outbound policy 1 action nonat policy destination policy 2 action sourcenat policy source easyip Ethernet0/0/0
教學(xué)課件相關(guān)推薦
鄂ICP備17016276號(hào)-1