|
interface Ethernet1/2
2 }% }, b' \- Z! F#) N. F" ]# S4 y
interface NULL0
: ^& I: U6 N% T! o## F( g/ R/ T4 k$ t+ p
firewall zone local
8 N* l. K( ~, i4 f' Lset priority 100 d9 J i1 e) m+ Y3 D' D
#
+ ~, y: c% p+ Y _. q8 _ Jfirewall zone trust3 u! b# y! p( L
add interface Ethernet0/0( Q2 w. @, u+ j0 @2 C! e% a
add interface Ethernet0/1: D% s. |/ i4 ~) p H' e
add interface Virtual-Template1
0 a; |" j4 K" Tset priority 85
& r! D6 Q" I, h6 S; Z#2 g2 F1 H: P- T
firewall zone untrust
$ {: A. ]/ l3 _3 A* C$ zadd interface Ethernet1/0
4 ~2 D! H" \7 f, t6 l6 |0 I% xset priority 5
w: n1 i8 q( W: X% _/ [# B# 6 \( p [9 C8 R
firewall zone DMZ
- c2 E9 A) E$ a+ G9 hset priority 50
9 c. m6 v6 {' O! x6 z4 m& I5 |#
0 M: Y0 p$ y9 s, d- G" Sfirewall interzone local trust t# G. j3 U7 c9 w* j0 u/ F
#
6 R1 K+ i* M8 ^& [" j# d( B" T5 Dfirewall interzone local untrust3 ]/ Z0 c. H! `% B
#) E, V: S! C6 g
firewall interzone local DMZ
/ K9 k1 l- B- [6 D#) G# K) G5 S& e5 p5 u3 V
firewall interzone trust untrust
1 _2 l% W/ b3 R& Q6 A1 ~+ Z#
/ n; [4 ^4 E4 c" Vfirewall interzone trust DMZ3 u; z( g, @, t* o& ]9 Q
#1 D& x, P, D$ l# n1 q9 U E
firewall interzone DMZ untrust
% O; j' W B) n7 K# d& ?8 L1 U# S& L4 M. R
l2tp-group 1
! }4 }3 ], K5 f h) j( z. Q" t, lmandatory-lcp
/ e C. L+ T r& {7 k/ {allow l2tp virtual-template 1
J9 n' N L& \4 Itunnel name lns
/ p- n* g* w0 _' V: p4 o ~# M1 G#* {8 ~1 f- Y6 i9 [3 b
ip route-static 0.0.0.0 0.0.0.0 61.139.x.225 preference 60
G6 C+ P/ R1 l#( C! {" X. o1 w8 }+ X( r7 Q
user-interface con 0" I/ i Q, `- s+ t9 O# z5 V1 V
user-interface aux 0
9 ] b; t; c3 Z4 u4 ^! Yuser-interface vty 0 4+ y1 s1 G, Z, Z9 `4 N
authentication-mode scheme" n" z. I+ S& O/ o) y& X. ~" i
user privilege level 3
! E" K" q- F3 g' j8 z2 ]# |
发表于 2012-8-4 12:10:41
楼主