H3C防火墙配置实例.doc

00000 10N0000000000 01 00000000000000000000 0H 00000000 0000□00□0000000000 1000000 Internet 211.101.5.49 outside E1/2:202111.0.1/27 H3CF100A inside E0/2:192. 68. 254. 1/24 hexnet.jimdo. 192. 168. 254. 2/24 192. 168. 254. 3/24 2 00000 20OOE12O0UNTRUSTODOipOOO202111① 27 30000000000-0-000000 192.168.254.2192.168.254.3 202.111.0.2202.111.0.3 4 00000000000000000000000000002 11.1 0 1. 5. 49 00
192.168.254.21433192.168.254.380 00000000000 discur SysnameH3CF10A (essdn nm firewallpacket-filterdefaultpermit nat static inside ip192.168.254.2global ip202.111.0.2 nat staticinsideip1@2.168.254.3globalip202.111.0.3
firewallstatisticsystemenable m000 00000 0 00000 n0D0 00000n 000000 0130 passwordcipher###### -000 n00 aspf-policy1 detecth323
0□□□□00□00 detect http 0000000000 detectftp 0000□0 000 000 000000 object address192.168.25 4.2/3 2 192.16 8.25 4.2 255.255.255.255 objectaddress192.168.254.3/32192.168.254.3 255.255.255.25 5 6 00 1 n0000n0000 rule1permit tcp source211.101.5.49destination 192.168.254.20destination-porteq1433
rule 2permit tcp source 211.1@1.5.4@@ destination 192.168.254.3destination-porteq rule 1@0deny ip 02 n n□□□□m□m0□□□□□□ rule1permitipsource192.168.254.20 rule2permitipsource192.168.254.30 rule1@0deny ip interfaceAuxo async mode flow interfaceEtherneto/o shutdown interfaceEthernet0/1