|
interface Ethernet1/2# L, d2 W- W- G- n0 h% S6 C
#* Z2 g. k2 e5 y6 L' F9 y! G
interface NULL0' P$ X/ i8 O4 Y: t, s. ~+ m3 i
#8 |6 C8 S f- c5 ^) @* Y
firewall zone local
; B6 k2 f$ ~8 @* \) e/ Bset priority 100! W$ [4 t: F2 q0 b# b: l, `9 t
#4 Z% }1 y: C7 R: a* ?6 w
firewall zone trust
8 c/ c5 D' i% p1 [0 D# Sadd interface Ethernet0/0( v B9 |, g1 f" _; v
add interface Ethernet0/1
% Y; K1 ]) N Sadd interface Virtual-Template1
, u3 G5 k5 u3 ?4 q! x, o2 B6 c. [set priority 85 n5 u% g x) X$ V9 P0 ^
#
' Y7 w* c( r! U( @firewall zone untrust
7 s' r: o$ Z) ]1 Qadd interface Ethernet1/0) H0 x$ |& L9 M6 n& G& U
set priority 5# Y2 |' u2 F! K# S# A6 z
# ! G/ w" s [# C: u# b
firewall zone DMZ
: ?3 N1 j: ?. m6 g+ @8 Iset priority 50! R. J8 B6 z1 h. K
#
* u+ O, U; \- Dfirewall interzone local trust5 A! f: G4 B* O8 ]8 M
#
; D, \% V+ ^8 H/ `5 Hfirewall interzone local untrust
0 z1 G) k( @/ p) m X( A: U#
" y' f# X8 z, ?0 }+ L1 {9 ?$ Efirewall interzone local DMZ8 U- j- p# J7 s" d
#
) q G: P7 x. e' s+ g! hfirewall interzone trust untrust l, R3 \# n% a$ D7 h/ c
#
) Q; B& @: s% `! h2 G ~firewall interzone trust DMZ
: {; v* i& C! o" B) r#
% [! r# b! E! V% j, Tfirewall interzone DMZ untrust$ c* r) j! s5 z4 G8 p! C" y, X/ ^
#! W+ w( _6 M# R; n" j! S% ?
l2tp-group 1
! k3 m9 t5 E) ^8 L" gmandatory-lcp
* O0 A% i) y3 @6 C- r0 ?) pallow l2tp virtual-template 1- V% H9 _' u1 |' H) B
tunnel name lns1 H8 m8 c( b- m6 Q5 B
#8 w$ o1 c3 ~; c0 }. U
ip route-static 0.0.0.0 0.0.0.0 61.139.x.225 preference 60, z! ~8 P: N T
#& j! _. |" m8 u+ o! ?
user-interface con 0' B( V$ K. |# q( b( t, X
user-interface aux 0
; X i8 o0 | C Y2 T% D; muser-interface vty 0 4
9 f9 y5 M _% ?authentication-mode scheme& c( i o3 x- Z' P5 ^5 b
user privilege level 3. v0 [* ~6 [" g: S, ?7 q
# |
发表于 2012-8-4 12:10:41
楼主