会计考友 发表于 2012-8-4 12:10:41

华为辅导：secpath10fadsl+dhcp配置

#
sysname Quidway
#
super password level 3 cipher N`C55QK

会计考友 发表于 2012-8-4 12:10:42

华为辅导：secpath10fadsl+dhcp配置

interface Ethernet1/0
ip address 192.168.0.1 255.255.255.0
#
interface Ethernet2/0
speed 10
duplex full
pppoe-client dial-bundle-number 1 no-hostuniq
#
interface NULL0
#
firewall zone local
set priority 100
#
firewall zone trust
add interface Ethernet1/0
set priority 85
#
firewall zone untrust （很关键，要把相应的接口加入到相应的安全策略区）
add interface Ethernet2/0
add interface Dialer1 （千万别忘记把虚拟的拨号口也加上）
set priority 5
statistic enable zone inzone
statistic enable zone outzone
statistic enable ip inzone
statistic enable ip outzone
#
firewall zone DMZ
set priority 50
#
firewall interzone local trust
#
firewall interzone local untrust
#
firewall interzone local DMZ
#
firewall interzone trust untrust
#
firewall interzone trust DMZ
#
firewall interzone DMZ untrust
#
FTP server enable
#
dhcp server forbidden-ip 192.168.0.1
#
ip route-static 0.0.0.0 0.0.0.0 Dialer 1 preference 60
#
user-interface con 0
user-interface vty 0 4
authentication-mode scheme
#
return
页: [1]
查看完整版本: 华为辅导：secpath10fadsl+dhcp配置