2-华为防火墙：安全策略分类

标签：set   color   bytes   protocol   分享   src   策略   type   des   

[SRG]display current-configuration configuration object-service-set
ip service-set aaa type object
service 0 protocol icmp
[SRG]display current-configuration configuration policy-interzone
policy interzone trust untrust outbound
policy 0
action permit
policy service service-set aaa
policy source 192.168.1.0 mask 24
policy destination 202.100.1.0 mask 24
测试：
[R2]ping 202.100.1.1
Reply from 202.100.1.1: bytes=56 Sequence=1 ttl=254 time=50 ms
Reply from 202.100.1.1: bytes=56 Sequence=2 ttl=254 time=50 ms
Reply from 202.100.1.1: bytes=56 Sequence=3 ttl=254 time=40 ms
Reply from 202.100.1.1: bytes=56 Sequence=4 ttl=254 time=30 ms
Reply from 202.100.1.1: bytes=56 Sequence=5 ttl=254 time=30 ms

[R1]ping 192.168.1.1
Request time out
Request time out
Request time out
Request time out
Request time out

2-华为防火墙：安全策略分类

标签：set   color   bytes   protocol   分享   src   策略   type   des   

原文地址：http://blog.51cto.com/13856092/2138630