标签：dom manage add access 模式 out ems traffic 配置
注意，这个是12.1 和12.3 版本或是之前的基本配置案例，15.1或之后的配置有细微区别，有需要可以找找KB或是官方文档。set security policies from-zone l2-trust to-zone l2-untrust policy p2 match source-address 10.1.1.1/24
set security policies from-zone l2-trust to-zone l2-untrust policy p2 match destination-address 20.1.1.1/32
set security policies from-zone l2-trust to-zone l2-untrust policy p2 match application ping
set security policies from-zone l2-trust to-zone l2-untrust policy p2 then permit
set security policies from-zone l2-trust to-zone l2-untrust policy p3 match source-address 10.1.1.1/24
set security policies from-zone l2-trust to-zone l2-untrust policy p3 match destination-address 20.1.1.1/32
set security policies from-zone l2-trust to-zone l2-untrust policy p3 match application ssh
set security policies from-zone l2-trust to-zone l2-untrust policy p3 then permit
标签：dom manage add access 模式 out ems traffic 配置
原文地址：http://blog.51cto.com/10242469/2069907
