icg配置和解释.docx

icg配置和解释.docx

《icg配置和解释.docx》由会员分享，可在线阅读，更多相关《icg配置和解释.docx（16页珍藏版）》请在冰豆网上搜索。

icg配置和解释

#

version5.20,Test1705

#

sysnameyichang-wangba

#

tcpsyn-cookieenable

tcpanti-napthaenable

tcpstateclosingconnection-number500

tcpstateestablishedconnection-number500

tcpstatefin-wait-1connection-number500

tcpstatefin-wait-2connection-number500

tcpstatelast-ackconnection-number500

tcpstatesyn-receivedconnection-number500

#

ipseccpu-backupenable

#

firewallenable

#

nataging-timetcp300

nataging-timeudp180

nataging-timepptp300

nataging-timeftp-ctrl300

#

domaindefaultenablesystem

#

telnetserverenable

#

qoscarl1source-ip-addressrange192.168.0.1to192.168.0.62per-address

qoscarl2destination-ip-addressrange192.168.0.1to192.168.0.62per-address

qoscarl3source-ip-addressrange192.168.0.64to192.168.0.220per-address

qoscarl4destination-ip-addressrange192.168.0.64to192.168.0.220per-address

#

mirroring-group1local

#

aclnumber2000

rule5permitsource192.0.0.00.255.255.255

rule10deny

#

aclnumber3100

rule10denytcpdestination-porteq445

rule11denyudpdestination-porteq445

rule20denytcpdestination-porteq135

rule21denyudpdestination-porteq135

rule30denytcpdestination-porteq137

rule31denyudpdestination-porteqnetbios-ns

rule40denytcpdestination-porteq138

rule41denyudpdestination-porteqnetbios-dgm

rule50denytcpdestination-porteq139

rule51denyudpdestination-porteqnetbios-ssn

rule61denyudpdestination-porteqtftp

rule70denytcpdestination-porteq593

rule80denytcpdestination-porteq4444

rule90denytcpdestination-porteq707

rule100denytcpdestination-porteq1433

rule101denyudpdestination-porteq1433

rule110denytcpdestination-porteq1434

rule111denyudpdestination-porteq1434

rule120denytcpdestination-porteq5554

rule130denytcpdestination-porteq9996

rule141denyudpsource-porteqbootps

rule160permiticmpicmp-typeecho

rule161permiticmpicmp-typeecho-reply

rule162permiticmpicmp-typettl-exceeded

rule165denyicmp

rule200denytcpdestination-porteqwww

rule202denytcpdestination-porteqftp

rule203denytcpdestination-porteq22

rule204permittcpdestination-porteqtelnet

rule2001permitipdestination192.0.0.00.255.255.255

rule2002denyip

#

vlan1

#

domainsystem

access-limitdisable

stateactive

idle-cutdisable

self-service-urldisable

#

user-groupsystem

#

local-useradmin

passwordcipherDa4.B2F^TUP61"DKDQR.FQ!

!

authorization-attributelevel3

service-typetelnet

#

wlanrrm

dot11bmandatory-rate12

dot11bsupported-rate5.511

dot11gmandatory-rate125.511

dot11gsupported-rate69121824364854

#

cwmp

undocwmpenable

#

interfaceAux0

asyncmodeflow

link-protocolppp

#

interfaceEthernet0/0

portlink-moderoute

firewallpacket-filter3100inbound

natoutbound2000

natserverprotocoltcpglobal61.136.223.16910086inside192.168.0.25110086

natserverprotocoltcpglobal61.136.223.16910087inside192.168.0.6310087

natserverprotocoltcpglobal61.136.223.16911469inside192.168.0.23011469

natserverprotocoltcpglobal61.136.223.16911470inside192.168.0.23011470

ipaddress61.136.223.169255.255.255.224

#

interfaceNULL0

#

interfaceVlan-interface1

ipaddress192.168.0.254255.255.255.0

qoscarinboundcarl1cir2000cbs64000ebs0greenpassreddiscard

qoscarinboundcarl3cir2000cbs64000ebs0greenpassreddiscard

qoscaroutboundcarl2cir3500cbs64000ebs0greenpassreddiscard

qoscaroutboundcarl4cir3500cbs64000ebs0greenpassreddiscard

#

interfaceEthernet0/1

portlink-modebridge

mirroring-group1mirroring-portboth

#

interfaceEthernet0/2

portlink-modebridge

#

interfaceEthernet0/3

portlink-modebridge

#

interfaceEthernet0/4

portlink-modebridge

mirroring-group1monitor-port

#

interfaceWLAN-Radio2/0

shutdown

#

iproute-static0.0.0.00.0.0.061.136.223.161

#

arpanti-attackactive-ackenable

arpstatic61.136.223.1610030-8803-673e

arpstatic192.168.0.1710019-2159-43611Ethernet0/1

arpstatic192.168.0.270019-db8c-68ef1Ethernet0/1

arpstatic192.168.0.410019-db8c-5eaa1Ethernet0/1

arpstatic192.168.0.40019-db8c-68e11Ethernet0/1

arpstatic192.168.0.20300e0-4cc1-77561Ethernet0/1

arpstatic192.168.0.260019-db8c-5db21Ethernet0/1

arpstatic192.168.0.25100f0-4c83-4cc21Ethernet0/1

arpstatic192.168.0.430019-db8c-6e061Ethernet0/1

arpstatic192.168.0.25300f0-4c84-be2e1Ethernet0/1

arpstatic192.168.0.30019-db83-34811Ethernet0/1

arpstatic192.168.0.20019-db8c-69311Ethernet0/1

arpstatic192.168.0.10300f0-4c88-6ed61Ethernet0/1

arpstatic192.168.0.80019-db8c-64371Ethernet0/1

arpstatic192.168.0.1050019-2159-a8db1Ethernet0/1

arpstatic192.168.0.70019-db8c-5eb21Ethernet0/1

arpstatic192.168.0.1600019-2159-43911Ethernet0/1

arpstatic192.168.0.280019-db8c-648d1Ethernet0/1

arpstatic192.168.0.10400f0-4c88-6eca1Ethernet0/1

arpstatic192.168.0.1060019-2159-a1151Ethernet0/1

arpstatic192.168.0.130019-db8c-5d4f1Ethernet0/1

arpstatic192.168.0.10800f0-4c88-6ec81Ethernet0/1

arpstatic192.168.0.1090019-2154-c3d41Ethernet0/1

arpstatic192.168.0.160019-db8c-62d81Ethernet0/1

arpstatic192.168.0.1110019-2159-45ed1Ethernet0/1

arpstatic192.168.0.1590019-2159-ab661Ethernet0/1

arpstatic192.168.0.1120019-2159-47b91Ethernet0/1

arpstatic192.168.0.10019-db8c-62a11Ethernet0/1

arpstatic192.168.0.200019-db8c-5ec31Ethernet0/1

arpstatic192.168.0.1100019-2159-a6fa1Ethernet0/1

arpstatic192.168.0.50019-db8c-5f241Ethernet0/1

arpstatic192.168.0.1580019-2159-483f1Ethernet0/1

arpstatic192.168.0.60019-db8c-5c2a1Ethernet0/1

arpstatic192.168.0.150019-db8c-68df1Ethernet0/1

arpstatic192.168.0.190019-db8c-6e091Ethernet0/1

arpstatic192.168.0.1140019-2159-48761Ethernet0/1

arpstatic192.168.0.11500f0-4c88-74131Ethernet0/1

arpstatic192.168.0.220019-db83-3b4b1Ethernet0/1

arpstatic192.168.0.110019-db8c-68f41Ethernet0/1

arpstatic192.168.0.310019-db8c-6f6a1Ethernet0/1

arpstatic192.168.0.180019-db8c-5d521Ethernet0/1

arpstatic192.168.0.100019-db8c-692c1Ethernet0/1

arpstatic192.168.0.1570019-2159-53b41Ethernet0/1

arpstatic192.168.0.90019-db8c-5e7f1Ethernet0/1

arpstatic192.168.0.1560019-214b-a8341Ethernet0/1

arpstatic192.168.0.360019-db8c-5c061Ethernet0/1

arpstatic192.168.0.290019-db8c-63641Ethernet0/1

arpstatic192.168.0.370019-db8c-5fbb1Ethernet0/1

arpstatic192.168.0.1130019-2159-a6fc1Ethernet0/1

arpstatic192.168.0.490019-db8c-5eb61Ethernet0/1

arpstatic192.168.0.250019-db8c-5c351Ethernet0/1

arpstatic192.168.0.140019-db8c-5e6f1Ethernet0/1

arpstatic192.168.0.500019-db8c-5ea31Ethernet0/1

arpstatic192.168.0.170019-db8c-61081Ethernet0/1

arpstatic192.168.0.1170019-2159-43891Ethernet0/1

arpstatic192.168.0.480019-db8c-5c771Ethernet0/1

arpstatic192.168.0.11600f0-4c88-6ed21Ethernet0/1

arpstatic192.168.0.510019-db8c-6d1c1Ethernet0/1

arpstatic192.168.0.320019-db8c-61421Ethernet0/1

arpstatic192.168.0.1180019-2154-c2151Ethernet0/1

arpstatic192.168.0.1550019-2159-48191Ethernet0/1

arpstatic192.168.0.1630019-214f-df031Ethernet0/1

arpstatic192.168.0.300019-db8c-69071Ethernet0/1

arpstatic192.168.0.240019-db8c-5c371Ethernet0/1

arpstatic192.168.0.1640019-2159-44d21Ethernet0/1

arpstatic192.168.0.230019-db8c-6e2b1Ethernet0/1

arpstatic192.168.0.330019-db8c-5e931Ethernet0/1

arpstatic192.168.0.350019-db8c-5c7d1Ethernet0/1

arpstatic192.168.0.1210019-2159-50e31Ethernet0/1

arpstatic192.168.0.210019-db8c-63021Ethernet0/1

arpstatic192.168.0.1650019-2159-51b31Ethernet0/1

arpstatic192.168.0.340019-db8c-63031Ethernet0/1

arpstatic192.168.0.550019-db8c-5e871Ethernet0/1

arpstatic192.168.0.1190019-212f-a6b31Ethernet0/1

arpstatic192.168.0.1610019-2154-a9a21Ethernet0/1

arpstatic192.168.0.1200019-2159-50dc1Ethernet0/1

arpstatic192.168.0.450019-db8c-64fa1Ethernet0/1

arpstatic192.168.0.1620019-2159-aa151Ethernet0/1

arpstatic192.168.0.380019-db8c-6d071Ethernet0/1

arpstatic192.168.0.520019-db8c-64341Ethernet0/1

arpstatic192.168.0.400019-db8c-5e781Ethernet0/1

arpstatic192.168.0.540019-db8c-632c1Ethernet0/1

arpstatic192.168.0.1220019-214f-d4261Ethernet0/1

arpstatic192.168.0.1700019-2159-4ad61Ethernet0/1

arpstatic192.168.0.1660019-2154-b7611Ethernet0/1

arpstatic192.168.0.560019-db8c-63ea1Ethernet0/1

arpstatic192.168.0.1790019-2159-52b41Ethernet0/1

arpstatic192.168.0.16900f0-4c88-6ed41Ethernet0/1

arpstatic192.168.0.12400f0-4c88-6ed81Ethernet0/1

arpstatic192.168.0.6700f0-4c88-6ecc1Ethernet0/1

arpstatic192.168.0.440019-db8c-5d501Ethernet0/1

arpstatic192.168.0.1780019-214f-d9381Ethernet0/1

arpstatic192.168.0.1680019-214b-91131Ethernet0/1

arpstatic192.168.0.570019-db8c-69101Ethernet0/1

arpstatic192.168.0.1730019-2159-ab711Ethernet0/1

arpstatic192.168.0.6500e0-3903-061d1Ethernet0/1

arpstatic192.168.0.1670019-214f-c9de1Ethernet0/1

arpstatic192.168.0.1760019-2159-a7711Ethernet0/1

arpstatic192.168.0.12300f0-4c88-6ed31Ethernet0/1

arpstatic192.168.0.1750019-2159-d8f41Ethernet0/1

arpstatic192.168.0.1740019-2154-a9941Ethernet0/1

arpstatic192.168.0.1540019-212f-a6c41Ethernet0/1

arpstatic192.168.0.390019-db8c-65281Ethernet0/1

arpstatic192.168.0.1800019-2159-47da1Ethernet0/1

arpstatic192.168.0.1850019-2150-18e71Ethernet0/1

arpstatic192.168.0.1260019-2