751华为850eu1000防火墙的配置文件Word格式文档下载.docx

751华为850eu1000防火墙的配置文件Word格式文档下载.docx

《751华为850eu1000防火墙的配置文件Word格式文档下载.docx》由会员分享，可在线阅读，更多相关《751华为850eu1000防火墙的配置文件Word格式文档下载.docx（38页珍藏版）》请在冰豆网上搜索。

taggedethe1/1

router-interfaceve188

vlan13byport

untaggedethe3/1to3/10

router-interfaceve13

system-maxip-cache256000

system-maxvlan512

system-maxvirtual-interface512

qosprofileqosp357qosp230qosp110qosp03

enable-acl-counter

enabletelnetpassword.....

enablesuper-user-password.....

ipaccess-policy97denyanyanyicmp

ipaccess-policy98denyanyanyudpeq5000

ipaccess-policy99denyanyanytcpeq5000

ipaccess-policy100denyanyanytcpeqloc-srv

ipaccess-policy101denyanyanyudpeqloc-srv

ipaccess-policy102denyanyanytcpeqprofile

ipaccess-policy103denyanyanyudpeqprofile

ipaccess-policy104denyanyanytcpeq137

ipaccess-policy105denyanyanyudpeqnetbios-ns

ipaccess-policy106denyanyanytcpeq138

ipaccess-policy107denyanyanyudpeqnetbios-dgm

ipaccess-policy108denyanyanytcpeqnetbios-ssn

ipaccess-policy109denyanyanytcpeqmicrosoft-ds

ipaccess-policy110denyanyanyudpeqmicrosoft-ds

ipaccess-policy111denyanyanytcpeqhttp-rpc-epmap

ipaccess-policy112denyanyanyudpeqhttp-rpc-epmap

ipaccess-policy113denyanyanytcpeq4444

ipaccess-policy114denyanyanyudpeqtftp

ipaccess-policy115denyanyanyudpeqnetbios-ssn

ipaccess-policy116denyanyanytcpeq6556

ipaccess-policy117denyanyanytcpeq1023

ipaccess-policy118permitanyany

iproute0.0.0.00.0.0.0192.168.1.2

iproute192.168.0.0255.255.0.0192.168.188.2

ipicmpburst-normal5000burst-max10000lockup300

iptcpburst-normal10burst-max100lockup300

port-priority

snmp-servercommunity.....rw

interfaceethernet1/1

gig-defaultneg-full-auto

interfaceethernet3/16

nospanning-tree

interfaceethernet4/1

gig-defaultauto-gig

interfaceethernet4/2

gig-defaultauto-gig

interfaceve10

ipaddress192.168.1.1255.255.255.0

interfaceve11

ipaddress192.168.2.1255.255.255.0

interfaceve12

ipaddress192.168.3.1255.255.255.0

ipaccess-policy-gin97to118

ipaccess-policy-gout97to118

interfaceve13

ipaddress192.168.5.1255.255.255.240

interfaceve30

ipaddress192.168.24.1255.255.254.0

interfaceve188

ipaddress192.168.188.1255.255.255.252

ipaccess-listextendedanti

denytcpanyanyeqloc-srv

denytcpanyanyeq137

denytcpanyanyeqnetbios-ssn

denytcpanyanyeqmicrosoft-ds

denyudpanyanyeqloc-srv

denyudpanyanyeqnetbios-ns

denyudpanyanyeqnetbios-ssn

denyudpanyanyeqmicrosoft-ds

redundancy

active-management1

end

telnet@DCRS-7515#

**********华为8500的配置****************

<

WL_S8505>

discu

#

config-versionS8500-VRP310-R1278P05

sysnameWL_S8505

superpasswordlevel3cipher5C-2'

O#EN'

OQ=^Q`MAF4<

1!

local-servernas-ip127.0.0.1keyhuawei

Xbarload-single

routerroute-limit128K

routerVRF-limit256

anti-attackarpenable

radiusschemesystem

server-typehuawei

primaryauthentication127.0.0.11645

primaryaccounting127.0.0.11646

user-name-formatwithout-domain

domainsystem

vlan-assignment-modeinteger

access-limitdisable

stateactive

idle-cutdisable

self-service-urldisable

domaindefaultenablesystem

local-userinfowei

level3

local-userwulianjiaowei

service-typetelnet

level1

aclnumber3000

rule1denyudpdestination-porteq135

rule2denyudpdestination-porteq136

rule3denyudpdestination-porteqnetbios-ns

rule4denyudpdestination-porteqnetbios-dgm

rule5denyudpdestination-porteqnetbios-ssn

rule7denyudpdestination-porteq445

rule8denyudpdestination-porteq539

rule9denyudpdestination-porteq593

rule10denyudpdestination-porteq1434

rule11denytcpdestination-porteq135

rule12denytcpdestination-porteq136

rule13denytcpdestination-porteq137

rule14denytcpdestination-porteq138

rule15denytcpdestination-porteq139

rule16denytcpdestination-porteq445

rule17denytcpdestination-porteq539

rule18denytcpdestination-porteq593

rule19denytcpdestination-porteq1434

rule20denytcpdestination-porteq4444

rule21denytcpdestination-porteq5554

rule22denytcpdestination-porteq9995

rule23denytcpdestination-porteq9996

#

vlan1

vlan2

descriptionTO_ERZHONG

vlan3

descriptionTO_SANZHONG

vlan4

descriptionTO_HONGNING

vlan5

descriptionTO_HONGXIAO

vlan6

descriptionTO_TEXIAO

vlan8

descriptionTO_ZHIXIAO

vlan11

descriptionTO_MOXIAO

vlan12

descriptionTO_HEXI_FENXIAO

vlan13

descriptionTO_ZHIJIAOZHONGXIN

vlan17

descriptionTO_SHICHANG

vlan18

descriptionTO_TONGSU

vlan100

descriptionTO_YIZHONG

vlan188

descriptionTO_JIAOWEI7515

vlan2071

descriptionTO_DONGBU_SCHOOL

vlan2076

descriptionTO_JIETOU

vlan2178

descriptionTO_ZHONGZHI

vlan2181

descriptionTO_WANGHU_CHUZHONG

vlan2183

descriptionTO_BEIXIAN

vlan2216

descriptionTO_WANGSHITUAN

interfaceVlan-interface2

ipaddress192.168.8.1255.255.254.0

interfaceVlan-interface3

ipaddress192.168.10.1255.255.254.0

ipaddress192.168.73.1255.255.254.0sub

ipaddress192.168.76.1255.255.254.0sub

interfaceVlan-interface4

ipaddress192.168.12.1255.255.254.0

interfaceVlan-interface5

ipaddress192.168.14.1255.255.254.0

interfaceVlan-interface6

ipaddress192.168.16.1255.255.254.0

interfaceVlan-interface8

ipaddress192.168.20.1255.255.254.0

interfaceVlan-interface11

ipaddress192.168.58.1255.255.254.0

interfaceVlan-interface12

ipaddress192.168.22.1255.255.254.0

interfaceVlan-interface13

ipaddress192.168.26.1255.255.254.0

interfaceVlan-interface17

ipaddress192.168.36.1255.255.254.0

ipaddress192.168.98.1255.255.254.0sub

interfaceVlan-interface18

ipaddress192.168.38.1255.255.254.0

interfaceVlan-interface100

ipaddress192.168.6.1255.255.255.248

interfaceVlan-interface188

ipaddress192.168.188.2255.255.255.252

interfaceVlan-interface2071

ipaddress192.168.18.1255.255.254.0

ipaddress192.168.60.1255.255.254.0sub

ipaddress192.168.74.1255.255.254.0sub

ipaddress192.168.84.1255.255.254.0sub

ipaddress192.168.92.1255.255.254.0sub

ipaddress192.168.94.1255.255.254.0sub

ipaddress192.168.96.1255.255.254.0sub

ipaddress192.168.100.1255.255.254.0sub

ipaddress192.168.116.1255.255.254.0sub

ipaddress192.168.118.1255.255.254.0sub

ipaddress192.168.120.1255.255.254.0sub

interfaceVlan-interface2076

ipaddress192.168.34.1255.255.254.0

ipaddress192.168.68.1255.255.254.0sub

ipaddress192.168.90.1255.255.254.0sub

interfaceVlan-interface2178

ipaddress192.168.32.1255.255.254.0

ipaddress192.168.48.1255.255.254.0sub

ipaddress192.168.50.1255.255.254.0sub

ipaddress192.168.66.1255.255.254.0sub

interfaceVlan-interface2181

ipaddress192.168.28.1255.255.254.0

ipaddress192.168.64.1255.255.254.0sub

ipaddress192.168.78.1255.255.254.0sub

ipaddress192.168.110.1255.255.254.0sub

ipaddress192.168.114.1255.255.254.0sub

interfaceVlan-interface2183

ipaddress192.168.30.1255.255.254.0

ipaddress192.168.62.1255.255.254.0sub

ipaddress192.168.102.1255.255.254.0sub

ipaddress192.168.104.1255.255.254.0sub

ipaddress192.168.106.1255.255.254.0sub

ipaddress192.168.108.1255.255.254.0sub

ipaddress192.168.112.1255.255.254.0sub

interfaceVlan-interface2216

ipaddress192.168.80.1255.255.254.0

ipaddress192.168.82.1255.255.254.0sub

ipaddress192.168.86.1255.255.254.0sub

ipaddress192.168.88.1255.255.254.0sub

interfaceAux0/0/1

interfaceM-Ethernet0/0/0

interfaceEthernet2/1/1

portaccessvlan100

packet-filterinboundip-group3000rule1system-index45

packet-filterinboundip-group3000rule2system-index46

packet-filterinboundip-group3000rule3system-index47

packet-filterinboundip-group3000rule4system-index48

packet-filterinboundip-group3000rule5system-index49

packet-filterinboundip-group3000rule7system-index50

packet-filterinboundip-group3000rule8system-index51

packet-filterinboundip-group3000rule9system-index52

packet-filterinboundip-group3000rule10system-index53

packet-filterinboundip-group3000rule11system-index54

packet-filterinboundip-group3000rule12system-index55

packet-filterinboundip-group3000rule13system-index56

packet-filterinboundip-group3000rule14system-index57

packet-filterinboundip-group3000rule15system-index58

packet-filterinboundip-group3000rule16system-index59

packet-filterinboundip-group3000rule17system-index60

packet-filterinboundip-gr