这是华为的配置：9 X3 n: D' s: w3 ^
#& z! p. U6 |# m
acl number 2000
! J/ R4 q. e6 {. P p9 x4 d& f' ` rule 0 permit source 172.16.14.1 0
7 e9 D7 {0 L2 v rule 1 permit source 172.16.1.0 0.0.0.255" G& }3 e a, p
rule 3 permit source 172.16.2.1 0; R6 ~; v6 s/ N$ F( M8 _
rule 4 permit source 172.16.2.13 0
& N$ b' I; a2 J9 o' A% y9 S/ W rule 5 permit source 172.16.10.0 0.0.0.255
% E8 S- X5 l U$ ~/ l rule 6 permit source 172.16.16.2 0
" ?2 d8 s- g6 W' o* q3 C G rule 7 permit source 172.16.2.2 0
/ ^/ |, M4 |, U3 m+ Z rule 8 permit source 172.16.14.50 0! K# O: C) r' p5 N
rule 10 deny
; U0 D% i* e3 u" t& Facl number 2001
1 Y; @& j6 {& X x5 N6 R rule 0 permit source 172.16.12.51 0
/ ?1 _. A. g8 R; c rule 5 deny9 Q3 o0 ^8 T% K6 w
acl number 2002
N/ Y6 z4 J# ^( c/ E rule 0 permit source 172.16.12.61 0
" C+ K9 ~; W+ C. @9 O$ h$ h rule 5 deny
& O- G( l5 i. ~& P5 Jacl number 20033 K: P, t6 d. Y
rule 0 permit source 172.15.10.4 05 E- s3 }1 f" p6 d3 p# c+ x3 {
rule 5 deny
6 q% n* ^3 C/ f7 ?: f( b/ B#
+ E* u/ [! }4 Q; D/ Aacl number 3000
2 t: H0 `) F* r! I6 \+ v8 U description dmz-trust ?& @+ L& a1 K3 Y" D- v
rule 0 permit tcp source 172.16.12.61 0 destination 172.16.10.71 0 destination-port eq 4008
" N8 l+ L: X! r8 p rule 1 permit tcp source 172.16.12.61 0 destination 172.16.10.71 0 destination-port eq 8898
9 j! G" a, ^2 ~3 E& _ rule 2 permit tcp source 172.16.12.61 0 destination 172.16.10.71 0 destination-port eq 8868
3 b5 F8 [6 m3 M x% ] rule 3 permit tcp source 172.16.12.61 0 destination 172.16.10.71 0 destination-port eq 8858: ?" S2 q- f1 g# s
rule 4 permit tcp source 172.16.12.61 0 destination 172.16.14.155 0 destination-port eq 40088 N' f f( z+ p: |
rule 5 permit tcp source 172.16.12.61 0 destination 172.16.14.155 0 destination-port eq 88985 n! Q8 C$ P, L( h1 y" }
rule 6 permit tcp source 172.16.12.61 0 destination 172.16.14.155 0 destination-port eq 8868
$ z% s6 A4 h+ E$ Z/ @5 h rule 7 permit tcp source 172.16.12.61 0 destination 172.16.14.155 0 destination-port eq 8858
' g7 P3 O% @6 X: f+ D4 \ rule 8 permit tcp source 172.16.12.51 0 destination 172.16.10.71 0 destination-port eq 4003 b; w) b( a' o5 k: h6 d
rule 9 permit tcp source 172.16.12.61 0 destination 172.16.10.71 0 destination-port eq ftp0 M* ~) ?; w1 s- S0 _9 _
rule 10 permit tcp source 172.16.12.61 0 destination 172.16.10.51 0 destination-port eq ftp4 i: x: e1 d% ]. n3 m7 d* i* C, W6 }
rule 11 permit tcp source 172.16.12.61 0 destination 172.16.14.155 0 destination-port eq ftp# _; g1 v& m4 L8 a% U) ]
rule 12 permit tcp source 172.16.12.51 0 destination 172.16.14.155 0 destination-port eq ftp' ] b6 M6 g" A) A
rule 13 permit tcp source 172.16.12.51 0 destination 172.16.10.71 0 destination-port eq ftp8 H. s9 |3 R4 G+ A
rule 14 permit tcp source 172.16.12.51 0 destination 172.16.10.51 0 destination-port eq ftp1 _2 w% |4 m' R; \+ \! \
rule 15 permit tcp source 172.16.12.51 0 destination 172.16.14.155 0 destination-port eq 4003, B0 t4 x3 b! a4 C# I, A
rule 16 permit ospf
4 |& x. n: O5 y. w" I# b rule 17 permit tcp source 172.16.12.51 0 destination 172.16.10.101 0 destination-port eq 8
' @' O$ u( g( ]2 }* e9 H! d rule 18 deny tcp7 q$ F* V& q2 K, _+ P1 L# h1 \. X
acl number 3001' l( A4 A: y5 O2 Y* }1 T+ R
description For Untrust-dmz
) w- }& O# L8 M( b' n. r! `2 W2 {, C rule 0 permit tcp source 172.16.20.0 0.0.0.255 destination 172.16.12.51 0 destination-port eq 5000! Z! ]9 J8 v) j5 G
rule 5 permit icmp
: J1 W# u+ i& o rule 10 permit ospf 5 h9 c+ C( m8 Z8 x" F
rule 15 deny tcp source 172.16.20.0 0.0.0.255
! @. ]1 b, u J6 E0 r ?4 uacl number 30022 x/ o5 I9 P# ]8 d! A
description To_Yinlian2 S4 K- u2 X3 C! B, g
rule 0 permit ip source 9.234.21.63 0 destination 144.234.97.33 0# D" p7 a: d2 ]* W: _$ m+ @
rule 5 permit ip source 9.234.21.64 0 destination 144.234.97.33 0/ i0 B7 ^ e/ T8 o) h2 _0 Z
rule 10 permit ip source 9.234.21.66 0 destination 144.234.97.33 0" V/ Q# F1 w! E# D
rule 15 deny ip
! G( y. k8 M/ L- b) b! O3 j+ j% f/ eacl number 3003! ]: B- ]) R/ u& x/ A- y7 Q
description for Untrust-Trust( E# n/ c: Y( \+ Z+ `, A
rule 0 permit ip source 10.78.72.70 0 destination 172.15.10.4 0
$ o: m; ]4 y6 N) H1 u) [ rule 1 permit ip source 172.16.2.26 0 destination 172.16.10.111 0' |) r4 x! {( m
rule 2 permit ip source 172.16.2.26 0 destination 172.16.14.1 01 j3 D. L0 H' H/ j2 d# C
rule 3 permit ip source 10.78.72.153 0 destination 172.15.10.4 0
# f! T# a3 C3 D! }6 H M& g rule 4 permit ip source 10.78.72.157 0 destination 172.15.10.4 0& i" T) p. @0 A0 {% D8 `
rule 5 permit ip source 192.168.100.43 0 destination 172.15.10.4 0
! f8 M* }, u6 G% Y, H0 w rule 6 permit ip source 10.16.2.7 0 destination 172.15.10.4 03 ^; U& b# G" s. R0 V
rule 7 permit ip source 10.16.2.5 0 destination 172.15.10.4 0
- ` A) f/ a" n4 D { rule 8 permit ip source 10.16.2.6 0 destination 172.15.10.4 0
/ G6 L) j0 U. P9 g% K" G7 Q rule 9 permit ip source 10.16.2.8 0 destination 172.15.10.4 0
5 ^% o: W6 i; W. m rule 11 permit ip source 10.139.25.26 0 destination 172.15.10.4 0
, ]* S4 S2 B# g4 k+ N( _$ f: R5 [ rule 13 permit ip source 10.143.10.183 0 destination 172.15.10.4 0
( K7 |) h4 K3 O/ v rule 50 deny ip& G1 v" i4 ^" E9 {
acl number 3004
! `# n# X" m7 P/ H2 H rule 0 permit ip source 172.16.1.7 0 destination 172.16.10.111 03 U: D3 T' s' l* }& z" i; p% M
acl number 3005
1 v! ~4 i% u M! @& y3 T description TO_dudubao# \: V0 h3 F7 t
rule 0 permit tcp destination 172.15.10.4 0 destination-port eq 6868
- \0 Z& T6 W4 o rule 1 permit tcp destination 172.15.10.4 0 destination-port eq ftp-data' y% `# I2 D1 k% J6 w# ~
rule 2 permit tcp destination 172.15.10.4 0 destination-port eq ftp
4 _ m2 g) ?* L! Iacl number 3006& m6 I. `& K7 l5 `; n4 c
rule 0 permit ip source 172.16.12.0 0.0.0.255 destination 10.0.1.0 0.0.0.255: n/ H! k2 E& H7 [8 S, p; C
acl number 3007
. h% y: ^2 \. r rule 0 deny ip source 172.16.12.0 0.0.0.255 destination 10.0.1.0 0.0.0.255
- I- S- [) o9 }2 N7 e+ w+ [* R rule 1 permit ip source 172.16.12.0 0.0.0.255, z5 t0 J7 A3 j& q) {
#
: |' i. {" h, A+ f sysname NB_Eudemon300-A0 a1 ~& F* L3 L6 q( l" w$ w
#/ B* Q/ ]; f7 a8 E" r. }) {
super password level 3 cipher '._1D9P1YCQ=^Q`MAF4<1!!
2 B" [3 F- A" ?6 j3 f#$ W6 m7 F# b5 m: Y8 t* c- [
info-center loghost 172.16.10.192
6 i" \9 K; |4 x% D2 ?: [& s1 D* f* _% u info-center loghost 172.16.10.111* K t& X* U. }6 O
#
$ x* O: O. y) N. F hrp enable
! x; w3 R# V( _ hrp interface Ethernet2/0/7
$ |* r7 U6 V0 F2 U9 |& K$ J#* _5 o. y) ~1 M, N1 Q: ^
router id 172.16.1.3
" t8 q d8 u! p#3 C7 m, ^% r+ H
firewall packet-filter default permit interzone local trust direction inbound
# Q, |4 m1 x( m& ^ firewall packet-filter default permit interzone local trust direction outbound
5 F# k% N4 P) e0 M, v1 H firewall packet-filter default permit interzone local untrust direction inbound
5 {6 h; A2 ?6 x7 H/ c) w/ S' }$ x firewall packet-filter default permit interzone local untrust direction outbound' M: I5 C# c% j( t# R, s( c
firewall packet-filter default permit interzone local dmz direction inbound3 L/ }5 T# |. h/ {. z/ h, _
firewall packet-filter default permit interzone local dmz direction outbound: w) G. W4 l/ {$ l, [5 V
firewall packet-filter default permit interzone local hrp direction inbound8 C7 d! w. {8 F8 Y$ ?4 }5 \
firewall packet-filter default permit interzone local hrp direction outbound: s( l; J7 w, A$ l1 a+ k
firewall packet-filter default permit interzone local gprs direction inbound
& M5 u' b9 I9 G firewall packet-filter default permit interzone local gprs direction outbound! J7 o [8 {2 @" t+ x( y; K% H: P/ [
firewall packet-filter default permit interzone local dudubao direction inbound
% Z [' ?" U7 O" T/ Q5 y firewall packet-filter default permit interzone local dudubao direction outbound
3 K+ c7 r- x A: q. B# m2 M firewall packet-filter default permit interzone trust untrust direction outbound2 \' q# i; n, h# z& ]* ~* s8 P
firewall packet-filter default permit interzone trust dmz direction inbound& _( j# z3 F; N0 u: {: `
firewall packet-filter default permit interzone trust dmz direction outbound
% I1 U: ~8 O0 O. B3 B firewall packet-filter default permit interzone trust gprs direction inbound
0 c4 m" Q7 _ P6 q firewall packet-filter default permit interzone trust gprs direction outbound
) o) t1 ?/ F% `$ @1 s* a firewall packet-filter default permit interzone trust dudubao direction inbound! C$ \3 U8 k! J) Y8 q6 Z R
firewall packet-filter default permit interzone trust dudubao direction outbound
4 L% ^% N& y( e* w7 s firewall packet-filter default permit interzone dmz untrust direction inbound: A# Q7 {: W) o2 U# P
firewall packet-filter default permit interzone dmz untrust direction outbound
N) E. j: t' {& m! C3 i firewall packet-filter default permit interzone dmz gprs direction inbound
1 l9 n# I1 z2 E- k9 D firewall packet-filter default permit interzone dmz gprs direction outbound( j8 [9 q9 {1 X6 ?1 m; w. E* @& w% v
firewall packet-filter default permit interzone dmz dudubao direction inbound( u% q$ z3 J1 u1 L& C* D. P$ u# Q
firewall packet-filter default permit interzone dmz dudubao direction outbound
" s, _ L4 S. D5 n#
) E1 ^$ f$ m. l4 y nat address-group 3 145.234.97.33 145.234.97.33
6 \4 J0 D" C3 t. ~3 t nat address-group 5 144.234.97.33 144.234.97.33/ h. V( `: y& r) Z
nat server zone gprs global 144.234.97.33 inside 172.16.12.61/ @5 i' T0 b$ C4 i4 H. G+ j
#, E+ d5 T0 R$ C2 O' ]) V. V4 E0 C9 t
bypass switch-back auto3 M6 O: v! o* f% [& Q; y$ ]
#3 J+ c. x' P% J* m' _7 s0 c
firewall mode route/ d+ S, s, {, C- j; l& x
#, `& I, N2 E" U' V1 f+ T; p* p7 D
firewall defend ip-spoofing enable
: h- S4 ?4 n: x: ~ firewall defend land enable
% h7 o p' K, C! a0 y8 K, z firewall defend smurf enable2 y8 B6 T+ e7 t5 P, G- g8 z/ p. ^$ q/ F
firewall defend fraggle enable
0 B/ M" L$ i; E6 C2 r1 T9 e firewall defend winnuke enable& d- ^$ f6 d9 l" S0 V0 A3 [: ?7 K
firewall defend syn-flood enable
" m- ^! |; @7 f% A firewall defend udp-flood enable2 n$ f! H# O0 g. w9 k
firewall defend icmp-redirect enable
- n$ X9 ]) G) ^: |) f" ` firewall defend icmp-unreachable enable
7 T' W# l; T" a2 S! ~) d9 W% k' C4 E% S$ p firewall defend ip-sweep enable / c( @0 i! K' [1 d8 B6 n" F) t; i
firewall defend port-scan enable
) j- V" I3 w4 X* j4 t0 x* U8 g firewall defend route-record enable
" m U4 u i* z; A, C' m1 Y firewall defend ping-of-death enable, M, E0 R p; R
firewall defend teardrop enable+ u7 K n* O) \9 w
firewall defend tcp-flag enable
+ m0 M# C; `' G5 y9 `6 b firewall defend large-icmp enable
7 P( c3 [& F* W8 R#
0 T! @+ T7 p- J$ c' o firewall statistic system enable
9 d& @( I! P: K* k+ G& L#) B( {5 F4 S! K6 Z6 c9 J
ike proposal 1
+ d& H9 c1 `- I2 y7 Z& U8 Y: \" v#
( B. y9 b# H, Z1 j& oike peer a% l7 g- u5 T' T# D* X/ J
pre-shared-key cnnbtk7 M1 m; ~; W0 O: Z
ike-proposal 18 q0 t1 p9 y- Q3 k: [: h
remote-address 119.57.5.5
- q0 ]- g5 ~2 v* t#
- ?& R. `, l [) }8 |3 w& q7 oipsec proposal tran1
9 z: s' z5 f/ V; D% d, T#
( ]0 _9 {9 I. a) Gipsec policy map1 1 isakmp
1 A. {6 _6 o5 l8 q( } security acl 3006% S7 J1 y/ t- x' n
pfs dh-group2
/ M( e a# B" \! ~' }- F ike-peer a) Q/ l7 H [* P9 K* a
proposal tran1
( @! o: I9 g2 i0 q+ B. r local-address 60.12.194.148 K5 Z: p6 }- @" [
#4 k7 i: q, b( c: f% T1 n* X3 A5 Z
interface Aux0
7 I2 ]( r8 E4 A: K+ O async mode flow
: J) _5 Z' j' v# p8 g8 H7 { link-protocol ppp
0 e5 \( a* h' \9 l. J#' G ]" Z$ A/ X% Q
interface Ethernet0/0/0) ~( ` h9 u) \( r) z% G0 V
#
' F' S! v5 e9 g2 v n2 o0 n( rinterface Ethernet0/0/1
. J4 R& m+ u& l$ X2 l& r' h8 ^#/ H( Q1 R: z8 j; m( f9 p5 n( r7 ?- B
interface Ethernet2/0/07 G$ ~2 G, r$ J4 N+ P
description To_S5624-A(1/0/24)2 o9 W/ y. d; \% Z
ip address 172.16.2.9 255.255.255.252
* w; v5 o8 X1 O$ ? ospf cost 100
* [$ |: {5 l3 z#6 i9 f: J- x7 L$ ^$ c$ C
interface Ethernet2/0/1
. b, W" L; B S! x# k description To_Yinlian. \) b8 L: L3 P1 y
ip address 145.234.132.154 255.255.255.252. T% b s+ S7 n$ j1 r
# I% F# p. R2 V) x( E7 U
interface Ethernet2/0/2
; U' q; @8 s; L3 b, w$ l description To_S6506R_A(7/0/48)
4 r' F' L6 M$ {1 x3 g ip address 172.16.2.2 255.255.255.252& G5 A2 {. X3 f t
ospf cost 100 D# E j( x- A, S/ y
#- \. g% W1 t! k
interface Ethernet2/0/3
* k# t0 Y1 S. M C4 W6 p description To-dudubao
3 q4 S7 |/ }3 ]: m ip address 60.12.194.14 255.255.255.240
" d& Z4 t2 K0 @# B4 r; n ipsec policy map1
% N( C `1 H( A: z& C! H#; H" L+ I, o- K& V
interface Ethernet2/0/4
7 ~. ?% A: y% m4 ?; {#& b7 B$ N, G/ z F9 h9 _
interface Ethernet2/0/55 z" V# m4 _' ?$ H% [; t2 h
#
. t0 [* S) \& g z1 r% Tinterface Ethernet2/0/6
" x4 v o) |& ^# Y#" w) V8 G# R, s: v2 h
interface Ethernet2/0/7
. o/ E8 z$ _5 P8 J1 K7 V description To_Eudemon300-B_E2/0/7
* H8 _2 R8 d5 H8 A" J ip address 172.16.2.201 255.255.255.248. X% Y7 G7 q% I' I
vrrp vrid 1 virtual-ip 172.16.2.203+ {* ^0 _6 C: l9 w9 b
vrrp vrid 1 priority 150
( Y9 ~2 k \, m2 h7 g/ ~ vrrp vrid 1 preempt-mode timer delay 600 s- k0 r" c! n+ C% B
vrrp vrid 2 virtual-ip 172.16.2.204
/ v' o% ]0 J4 l6 T6 K; @#, |) K' J! m9 m+ W3 o
interface GigabitEthernet1/0/0, K& g$ l) U8 f' X; L9 W$ _4 H
shutdown
+ V5 f7 ~3 a2 z2 U# U, |#
# h, v1 [1 N# P |8 D. P( c& Ainterface GigabitEthernet1/0/1
6 v$ E0 r. R7 O6 R# x description To_S5624-B(1/0/25)
0 I8 d1 r/ T0 p# r# Z" | ip address 172.16.2.25 255.255.255.252
7 [0 |; U& F% s" `) q ospf cost 500
, c ?) F% E/ W% f% R: ^" U( t#
/ P4 R7 E( r* V8 ]9 s) S0 {interface NULL0
}- h1 b% E" l+ r' G; f% q* d#) V3 l, n0 q, j( C2 C. p/ n
interface LoopBack0 W( L6 W3 n7 L5 y" Z; j, A
ip address 172.16.1.3 255.255.255.2550 i+ l* ^' G0 n0 [6 X* E7 u5 U* ^
#
6 p4 A$ j( O) O- u4 J x2 V, ~firewall zone local
/ n5 K& u1 [1 A' [5 G: X8 E) ?, ?4 ^ set priority 100
* V. {2 L7 ^) o( S( u- _#: q8 J4 |; ]$ e9 ^8 \0 G. L0 p$ @* r
firewall zone trust! T8 d. }$ g1 F7 i) T* q e
set priority 85
. f+ `/ H3 C/ F detect ftp3 H$ m" r* D. c) C4 J
add interface Ethernet2/0/2) R b+ K5 l0 X. t& K- Q/ ]
#$ p; z6 I! R* \- h
firewall zone untrust8 V+ y3 o5 V* M# n( u- M
set priority 59 ]" c; P& F2 ]
detect ftp
) J4 G u- r* f% }( Z7 ]5 N add interface GigabitEthernet1/0/1
* q) o# I% N( P0 f2 f#
( T9 `1 H M9 `( y, d1 d2 hfirewall zone dmz9 p7 I, d' `/ g
set priority 50
0 _* H- ]: S$ W {8 F$ } add interface Ethernet2/0/0
( k; M+ X% ]5 E7 H) v#
8 q; n! Y E$ r5 I5 o! N( Cfirewall zone name hrp
{: B: f( O, i set priority 407 n' P- _2 p4 }, ?6 m
add interface Ethernet2/0/7
( q: F+ g' A% y, W; k#. E' d9 N. J$ q
firewall zone name gprs
7 E6 v: ?2 J7 v1 H1 ^ D' @ set priority 4
( g8 Y( c) H! I0 v- k detect ftp
% U# i+ k* f+ x" } add interface Ethernet2/0/1
' k$ ~/ Q+ \5 F! W#% j4 t) K# N1 X
firewall zone name dudubao
3 u, g( H8 K: I- v, y set priority 3
! z' S9 A9 g! [( {, X detect ftp; H& u8 v+ }2 F
add interface Ethernet2/0/39 j! s. K. |0 Z e2 x7 R0 X: Q
#
" K$ j# C2 y: b( F* r) Hfirewall interzone local trust
) m5 o$ g6 `* c9 K8 E8 w; D#
$ m; N4 B, N0 yfirewall interzone local untrust ! l, C( w3 J3 d/ o5 V1 V1 z9 E
#
9 {, _/ L+ f% `/ K5 t% Tfirewall interzone local dmz: F* c- {+ ^' d' f3 ~1 ^
#
% _2 Z: Y. ~+ K# j9 ^5 c% Z0 Ufirewall interzone local hrp, w* [ R9 P. F5 G- _! _9 n% n0 X
#
4 \6 V5 K5 ~: Q5 |firewall interzone local gprs8 A$ {/ q, z1 C. I. x
#! B! w( r/ r6 w( Y& G5 b
firewall interzone local dudubao, H" Q* u% A6 n) g" x1 G; d
#* b! H, h: g. y; |
firewall interzone trust untrust2 r9 y9 S- r: F5 f+ N7 u3 B
packet-filter 3003 inbound" z: i7 a/ q( k' ]9 x
detect ftp0 I! j/ Y n# D: A) @( v) _
#
! @' E a+ w, Afirewall interzone trust dmz1 ~* s/ b5 w$ [1 z7 T
#
' v: h/ |/ C' }firewall interzone trust hrp+ I# ~3 _+ G {1 n/ R0 `5 G
#; L& ]' l6 n/ M; n
firewall interzone trust gprs
& {0 K. e+ t; x nat outbound 2003 address-group 3
D' ~3 @1 H1 h% p: d0 O( N detect ftp
9 G/ `3 X- g( Z1 @#
4 s3 m/ n0 ], X2 k2 S5 p/ Lfirewall interzone trust dudubao
* W C3 j. e/ _1 T# h; U packet-filter 3005 inbound 5 |0 {# P9 q' B# n; b& f: i
detect ftp
# G- a% @4 c; t#
; P/ a; `: T& B5 Y1 a6 {firewall interzone dmz untrust! G) A2 \: x' ^
#9 r- _3 \* R B9 X, ?. _* K v( s2 _
firewall interzone hrp untrust
& S+ R( s3 T- v#( U: V. y% z2 W- h4 M; ]( x, |
firewall interzone untrust gprs( ~0 `$ ~4 F# C
#& ~2 z a2 t* W1 z
firewall interzone untrust dudubao
( {7 n& s) W: ?! k4 P#" r% Y6 X/ h% h# z- E; C, b
firewall interzone dmz hrp
( I& N, u G4 t, g* `1 l0 J#
. _- o: [5 v& {( N( D/ zfirewall interzone dmz gprs
3 d9 D i& M4 q+ b packet-filter 3002 inbound4 ~. x2 z# Y$ w9 w5 g2 t3 o2 P/ a; F
nat outbound 2002 address-group 5
V1 c- x0 S9 ?- u0 c% `0 { detect ftp2 L- P0 l2 n. f; V+ {
#
& e5 ~+ s3 Z) @9 w+ w" j$ y& ifirewall interzone dmz dudubao. `4 |, v1 X+ P& R8 N
packet-filter 3006 outbound3 F+ K; U5 U% E- J2 W
#
0 m5 Z7 J$ U0 c5 W% k- bfirewall interzone hrp gprs( H' ~ }. r+ x5 G( r4 `
#
, U4 \1 j5 d$ N( S Q* M5 xfirewall interzone hrp dudubao . {2 M- k$ h% b+ g! S
#* b/ g9 o! G0 q( ^% n( }) G- C
firewall interzone gprs dudubao
/ }" L( ^; \8 j& X; K#
( D3 \2 W5 c- z* Fvrrp group 1
" |- V% G# H2 F+ Y; G- y: @# _ add interface Ethernet2/0/7 vrrp vrid 1 data T3 }9 n; G2 ~- K, b% k7 s
vrrp-group enable- b% h! [, y1 Y( r) V
vrrp-group priority 105
. t( J( g* K, h4 c5 y vrrp-group preempt delay 60* c) U. ~, P( ?2 C6 t
undo vrrp-group group-send7 ^ X" K+ E( _3 F f$ s
vrrp group 2
/ w f+ T' ^' y% a add interface Ethernet2/0/7 vrrp vrid 2 data8 }. K' p, ?9 O9 l
vrrp-group enable
; Q7 \, w- o. j2 l undo vrrp-group preempt& c7 `2 l, a6 M4 m# I, w
undo vrrp-group group-send! y* c/ g7 k+ Z
#
9 y; ?# ~# a" {1 [2 \) k5 n; j6 g- Gaaa
7 l7 t% v2 k+ r4 z4 g' Z8 [. h* f$ J6 C local-user huawei password cipher 1_`%CO&$8@7"+C5`;6XL!!!
3 d1 @! @5 n5 m; U; ^9 _ local-user huawei service-type terminal telnet ssh( x4 x, U1 Q/ v/ Y- H1 c4 r
local-user huawei level 1
3 o3 S5 A4 _0 y) O% C$ @2 D authentication-scheme default
: t9 ]" Y; v$ ~$ ]7 S' a#
f0 o$ ]) H+ V authorization-scheme default
& p: c t: Y6 ~6 {) N7 T" \#
+ p6 K. L' H, a7 M% |) O: V accounting-scheme default! s1 o' F3 f3 U% Y& s* _& A
#% A& w" x# H6 O5 n% Z1 ~
domain default
( y0 O) t3 ^! ?9 i6 {0 c* C8 {#
4 a6 D2 n. M' x0 S9 u* x) j#7 Y: e c! `9 u) k
ospf 18 O. `) \0 l$ c& M1 P; B+ u4 T
import-route static
1 i7 ?4 T2 W8 \5 J* D8 c; {2 v area 0.0.0.0
) E+ D7 c9 ]. ?9 W/ l network 172.16.1.3 0.0.0.0
, v% L6 B. R+ f ?( j% ?/ Y network 172.16.2.0 0.0.0.3( f q3 a$ d7 T5 g" u# u! @
network 172.16.2.8 0.0.0.3; u$ `! [% k: |$ K% b4 N
network 172.16.2.24 0.0.0.3
3 o+ A5 R# u1 G! J o/ H* k#
5 U3 S8 b7 f6 y ip route-static 9.234.21.0 255.255.255.0 145.234.132.153# p; l2 F" t! ^0 A3 [5 F8 Q8 X; p& M+ s
ip route-static 10.0.1.0 255.255.255.0 60.12.194.129. q# o8 L7 P+ p( e* Z# }
ip route-static 61.14.10.218 255.255.255.255 60.12.194.129
$ }. z$ M( F) l3 u3 N( p" s ip route-static 119.57.5.0 255.255.255.0 60.12.194.129; l$ B! Y( _% d3 z6 X( Y2 }
ip route-static 172.15.10.4 255.255.255.255 172.16.2.10 K8 k9 T" O. l/ ?$ m5 O& q
ip route-static 221.136.75.25 255.255.255.255 60.12.194.129
7 m; a3 n4 d) `2 @4 q$ o#' o1 A- _/ H5 k0 ?/ h1 X
snmp-agent
7 E; ^6 A; u, @5 F9 B) S snmp-agent local-engineid 000007DB7F00000100001BEE
( t1 {8 [+ T2 `+ o snmp-agent community read nbcardro
9 ~, G& w; b+ g snmp-agent sys-info version all
! f& P- |* B/ E, Q* P$ u( v#; g# D- P+ |6 o% h; u) i- G, u5 R
ssh server timeout 30
7 q& {4 Y+ D2 s# W' Z5 Q ssh server rekey-interval 24. U7 q, A. T) m- E. ~, {
ssh user huawei authentication-type password
4 o# I: ~: u, C w0 E) {#
. B Y: @( _1 G( Vuser-interface con 0
0 h# ?& o) l" f5 @ authentication-mode aaa
+ M# P" ^: B6 q! R+ ^; Muser-interface aux 0
o& e# K5 [' r: C# Z7 } authentication-mode none
1 Q* ]; P: [; f/ I$ Q* v4 Huser-interface vty 0 48 S$ p6 \) d2 M) R' p0 W' q8 G4 F
acl 2000 inbound( l1 H; o. |1 j G% U
authentication-mode aaa
$ V" J' p6 r, [' E idle-timeout 5 0) l q# g( b4 I" L( l X& Z: {
#+ {* F( D& ?# V0 M) y, h0 c: U
return |
所有IT类厂商认证考试题库下载
【新盟教育】2023最新华为HCIA全套视频合集【网工基础全覆盖】---国sir公开课合集
【新盟教育】网工小白必看的！2023最新版华为认证HCIA Datacom零基础全套实战课
原创_超融合自动化运维工具cvTools
重量级~~30多套JAVA就业班全套 视频教程（请尽快下载，链接失效后不补）
链接已失效【超过几百G】EVE 国内和国外镜像 全有了 百度群分享
某linux大佬，积累多年的电子书(约300本)
乾颐堂现任明教教主Python完整版
乾颐堂 教主技术进化论 2018-2019年 最新31-50期合集视频（各种最新技术杂谈视频）
Python学习视频 0起点视频 入门到项目实战篇 Python3.5.2视频教程 共847集 能学102天
约21套Python视频合集 核心基础视频教程（共310G,已压缩）
最新20180811录制 IT爱好者-清风羽毛 - 网络安全IPSec VPN实验指南视频教程
最新20180807录制EVE开机自启动虚拟路由器并桥接物理网卡充当思科路由器
[复制链接]
