标签：ber   sele   protocol   ESS   packet   default   enc   ash   evel   

interface Ethernet1/0/1
port access vlan 2
#
interface Ethernet1/0/2
#
interface Ethernet1/0/3
#
interface Ethernet1/0/4
#
interface Ethernet1/0/5
#
interface Ethernet1/0/6
#
interface Ethernet1/0/7
#
interface NULL0
#
right-manager server-group
#//装换相应的源地址
acl number 2000
rule 5 permit source 10.0.0.0 0.0.0.255
rule 10 permit source 172.16.0.0 0.0.255.255
rule 15 permit source 172.17.0.0 0.0.255.255
#
acl number 3000
rule 5 permit ip
#
cwmp
#
firewall zone local
set priority 100
#
firewall zone trust
set priority 85
add interface Vlanif2
#
firewall zone untrust
set priority 5
add interface Ethernet0/0/0
#
firewall zone dmz
set priority 50
#
firewall interzone local trust

firewall interzone local untrust
#
firewall interzone local dmz
//加进相应区域
firewall interzone trust untrust
packet-filter 3000 outbound
nat outbound 2000 interface Ethernet0/0/0
detect ftp
#
firewall interzone trust dmz
#
firewall interzone dmz untrust
#
aaa
local-user maintainadmin password simple maintainadmin
local-user maintainadmin level 3
local-user admin password cipher ]MQ;4]B+4Z,YWX*NZ55OA!!
local-user admin service-type web telnet ssh
local-user admin level 3
local-user admin ftp-directory flash:/
authentication-scheme default
authentication-scheme aaa

authorization-scheme default
#
accounting-scheme default
#
domain default
#
#
slb
#//到外部路由、到内部的路由
ip route-static 0.0.0.0 0.0.0.0 172.16.105.254
ip route-static 10.0.0.0 255.0.0.0 172.17.254.1
ip route-static 172.16.0.0 255.255.0.0 172.17.254.1
#
user-interface con 0
user-interface tty 81
authentication-mode none
modem both
user-interface vty 0 4
authentication-mode aaa
#
common
update auto time 0:03
update server domain sec.huawei.com
#
surfbehavior
#
ips
#
protocol
#
mailfilter
#
return
14:10:09 09-07-2018
**<USG2130> ping 114.114.114.114 //测试上网
PING 114.114.114.114: 56 data bytes, press CTRL+C to break
Reply from 114.114.114.114: bytes=56 Sequence=1 ttl=78 time=16 ms
Reply from 114.114.114.114: bytes=56 Sequence=2 ttl=59 time=17 ms
Reply from 114.114.114.114: bytes=56 Sequence=3 ttl=71 time=17 ms
Reply from 114.114.114.114: bytes=56 Sequence=4 ttl=60 time=33 ms
Reply from 114.114.114.114: bytes=56 Sequence=5 ttl=70 time=17 ms

--- 114.114.114.114 ping statistics ---
5 packet(s) transmitted
5 packet(s) received
0.00% packet loss
round-trip min/avg/max = 16/20/33 ms

14:10:15 09-07-2018
**

USG2130配置nat、策略、路由

标签：ber   sele   protocol   ESS   packet   default   enc   ash   evel   

原文地址：http://blog.51cto.com/9616635/2171571