751华为850eu1000防火墙的配置文件.docx
《751华为850eu1000防火墙的配置文件.docx》由会员分享，可在线阅读，更多相关《751华为850eu1000防火墙的配置文件.docx（38页珍藏版）》请在冰豆网上搜索。
751华为850eu1000防火墙的配置文件
********7515的配置文件*******
telnet@DCRS-7515#shrun
!
Buildingconfiguration...
!
Currentconfiguration:
3386bytes
!
ver07.6.04cT53
ipdont-use-acl
!
!
module1fi-2-port-gig-management-module
module2fi-2-port-gig-management-module
module3fi-24-port-copper-module
module4fi-8-port-gig-module
!
global-protocol-vlan
!
!
vlan1nameDEFAULT-VLANbyport
!
vlan10byport
untaggedethe1/2ethe3/11to3/24ethe4/1to4/6
router-interfaceve10
!
vlan11byport
untaggedethe2/1to2/2
router-interfaceve11
!
vlan12byport
untaggedethe4/7
router-interfaceve12
!
vlan30byport
untaggedethe4/8
router-interfaceve30
!
vlan188byport
taggedethe1/1
router-interfaceve188
!
vlan13byport
untaggedethe3/1to3/10
router-interfaceve13
!
!
system-maxip-cache256000
system-maxvlan512
system-maxvirtual-interface512
!
qosprofileqosp357qosp230qosp110qosp03
enable-acl-counter
enabletelnetpassword.....
enablesuper-user-password.....
ipaccess-policy97denyanyanyicmp
ipaccess-policy98denyanyanyudpeq5000
ipaccess-policy99denyanyanytcpeq5000
ipaccess-policy100denyanyanytcpeqloc-srv
ipaccess-policy101denyanyanyudpeqloc-srv
ipaccess-policy102denyanyanytcpeqprofile
ipaccess-policy103denyanyanyudpeqprofile
ipaccess-policy104denyanyanytcpeq137
ipaccess-policy105denyanyanyudpeqnetbios-ns
ipaccess-policy106denyanyanytcpeq138
ipaccess-policy107denyanyanyudpeqnetbios-dgm
ipaccess-policy108denyanyanytcpeqnetbios-ssn
ipaccess-policy109denyanyanytcpeqmicrosoft-ds
ipaccess-policy110denyanyanyudpeqmicrosoft-ds
ipaccess-policy111denyanyanytcpeqhttp-rpc-epmap
ipaccess-policy112denyanyanyudpeqhttp-rpc-epmap
ipaccess-policy113denyanyanytcpeq4444
ipaccess-policy114denyanyanyudpeqtftp
ipaccess-policy115denyanyanyudpeqnetbios-ssn
ipaccess-policy116denyanyanytcpeq6556
ipaccess-policy117denyanyanytcpeq1023
ipaccess-policy118permitanyany
!
iproute0.0.0.00.0.0.0192.168.1.2
iproute192.168.0.0255.255.0.0192.168.188.2
!
ipicmpburst-normal5000burst-max10000lockup300
iptcpburst-normal10burst-max100lockup300
port-priority
snmp-servercommunity.....rw
snmp-servercommunity.....rw
snmp-servercommunity.....rw
snmp-servercommunity.....rw
snmp-servercommunity.....rw
!
interfaceethernet1/1
gig-defaultneg-full-auto
!
interfaceethernet3/16
nospanning-tree
!
interfaceethernet4/1
gig-defaultauto-gig
!
interfaceethernet4/2
gig-defaultauto-gig
!
interfaceve10
ipaddress192.168.1.1255.255.255.0
!
interfaceve11
ipaddress192.168.2.1255.255.255.0
!
interfaceve12
ipaddress192.168.3.1255.255.255.0
ipaccess-policy-gin97to118
ipaccess-policy-gout97to118
!
interfaceve13
ipaddress192.168.5.1255.255.255.240
!
interfaceve30
ipaddress192.168.24.1255.255.254.0
ipaccess-policy-gin97to118
ipaccess-policy-gout97to118
!
interfaceve188
ipaddress192.168.188.1255.255.255.252
!
!
ipaccess-listextendedanti
denytcpanyanyeqloc-srv
denytcpanyanyeq137
denytcpanyanyeqnetbios-ssn
denytcpanyanyeqmicrosoft-ds
denyudpanyanyeqloc-srv
denyudpanyanyeqnetbios-ns
denyudpanyanyeqnetbios-ssn
denyudpanyanyeqmicrosoft-ds
!
!
!
!
redundancy
active-management1
!
end
telnet@DCRS-7515#
**********华为8500的配置****************
discu
#
config-versionS8500-VRP310-R1278P05
#
sysnameWL_S8505
#
superpasswordlevel3cipher5C-2'O#EN'OQ=^Q`MAF4<1!
!
#
local-servernas-ip127.0.0.1keyhuawei
#
Xbarload-single
#
routerroute-limit128K
routerVRF-limit256
#
anti-attackarpenable
#
radiusschemesystem
server-typehuawei
primaryauthentication127.0.0.11645
primaryaccounting127.0.0.11646
user-name-formatwithout-domain
#
domainsystem
vlan-assignment-modeinteger
access-limitdisable
stateactive
idle-cutdisable
self-service-urldisable
domaindefaultenablesystem
#
local-userinfowei
level3
local-userwulianjiaowei
service-typetelnet
level1
#
aclnumber3000
rule1denyudpdestination-porteq135
rule2denyudpdestination-porteq136
rule3denyudpdestination-porteqnetbios-ns
rule4denyudpdestination-porteqnetbios-dgm
rule5denyudpdestination-porteqnetbios-ssn
rule7denyudpdestination-porteq445
rule8denyudpdestination-porteq539
rule9denyudpdestination-porteq593
rule10denyudpdestination-porteq1434
rule11denytcpdestination-porteq135
rule12denytcpdestination-porteq136
rule13denytcpdestination-porteq137
rule14denytcpdestination-porteq138
rule15denytcpdestination-porteq139
rule16denytcpdestination-porteq445
rule17denytcpdestination-porteq539
rule18denytcpdestination-porteq593
rule19denytcpdestination-porteq1434
rule20denytcpdestination-porteq4444
rule21denytcpdestination-porteq5554
rule22denytcpdestination-porteq9995
rule23denytcpdestination-porteq9996
#
vlan1
#
vlan2
descriptionTO_ERZHONG
#
vlan3
descriptionTO_SANZHONG
#
vlan4
descriptionTO_HONGNING
#
vlan5
descriptionTO_HONGXIAO
#
vlan6
descriptionTO_TEXIAO
#
vlan8
descriptionTO_ZHIXIAO
#
vlan11
descriptionTO_MOXIAO
#
vlan12
descriptionTO_HEXI_FENXIAO
#
vlan13
descriptionTO_ZHIJIAOZHONGXIN
#
vlan17
descriptionTO_SHICHANG
#
vlan18
descriptionTO_TONGSU
#
vlan100
descriptionTO_YIZHONG
#
vlan188
descriptionTO_JIAOWEI7515
#
vlan2071
descriptionTO_DONGBU_SCHOOL
#
vlan2076
descriptionTO_JIETOU
#
vlan2178
descriptionTO_ZHONGZHI
#
vlan2181
descriptionTO_WANGHU_CHUZHONG
#
vlan2183
descriptionTO_BEIXIAN
#
vlan2216
descriptionTO_WANGSHITUAN
#
interfaceVlan-interface2
ipaddress192.168.8.1255.255.254.0
#
interfaceVlan-interface3
ipaddress192.168.10.1255.255.254.0
ipaddress192.168.73.1255.255.254.0sub
ipaddress192.168.76.1255.255.254.0sub
#
interfaceVlan-interface4
ipaddress192.168.12.1255.255.254.0
#
interfaceVlan-interface5
ipaddress192.168.14.1255.255.254.0
#
interfaceVlan-interface6
ipaddress192.168.16.1255.255.254.0
#
interfaceVlan-interface8
ipaddress192.168.20.1255.255.254.0
#
interfaceVlan-interface11
ipaddress192.168.58.1255.255.254.0
#
interfaceVlan-interface12
ipaddress192.168.22.1255.255.254.0
#
interfaceVlan-interface13
ipaddress192.168.26.1255.255.254.0
#
interfaceVlan-interface17
ipaddress192.168.36.1255.255.254.0
ipaddress192.168.98.1255.255.254.0sub
#
interfaceVlan-interface18
ipaddress192.168.38.1255.255.254.0
#
interfaceVlan-interface100
ipaddress192.168.6.1255.255.255.248
#
interfaceVlan-interface188
ipaddress192.168.188.2255.255.255.252
#
interfaceVlan-interface2071
ipaddress192.168.18.1255.255.254.0
ipaddress192.168.60.1255.255.254.0sub
ipaddress192.168.74.1255.255.254.0sub
ipaddress192.168.84.1255.255.254.0sub
ipaddress192.168.92.1255.255.254.0sub
ipaddress192.168.94.1255.255.254.0sub
ipaddress192.168.96.1255.255.254.0sub
ipaddress192.168.100.1255.255.254.0sub
ipaddress192.168.116.1255.255.254.0sub
ipaddress192.168.118.1255.255.254.0sub
ipaddress192.168.120.1255.255.254.0sub
#
interfaceVlan-interface2076
ipaddress192.168.34.1255.255.254.0
ipaddress192.168.68.1255.255.254.0sub
ipaddress192.168.90.1255.255.254.0sub
#
interfaceVlan-interface2178
ipaddress192.168.32.1255.255.254.0
ipaddress192.168.48.1255.255.254.0sub
ipaddress192.168.50.1255.255.254.0sub
ipaddress192.168.66.1255.255.254.0sub
#
interfaceVlan-interface2181
ipaddress192.168.28.1255.255.254.0
ipaddress192.168.64.1255.255.254.0sub
ipaddress192.168.78.1255.255.254.0sub
ipaddress192.168.110.1255.255.254.0sub
ipaddress192.168.114.1255.255.254.0sub
#
interfaceVlan-interface2183
ipaddress192.168.30.1255.255.254.0
ipaddress192.168.62.1255.255.254.0sub
ipaddress192.168.102.1255.255.254.0sub
ipaddress192.168.104.1255.255.254.0sub
ipaddress192.168.106.1255.255.254.0sub
ipaddress192.168.108.1255.255.254.0sub
ipaddress192.168.112.1255.255.254.0sub
#
interfaceVlan-interface2216
ipaddress192.168.80.1255.255.254.0
ipaddress192.168.82.1255.255.254.0sub
ipaddress192.168.86.1255.255.254.0sub
ipaddress192.168.88.1255.255.254.0sub
#
interfaceAux0/0/1
#
interfaceM-Ethernet0/0/0
#
interfaceEthernet2/1/1
descriptionTO_YIZHONG
portaccessvlan100
packet-filterinboundip-group3000rule1system-index45
packet-filterinboundip-group3000rule2system-index46
packet-filterinboundip-group3000rule3system-index47
packet-filterinboundip-group3000rule4system-index48
packet-filterinboundip-group3000rule5system-index49
packet-filterinboundip-group3000rule7system-index50
packet-filterinboundip-group3000rule8system-index51
packet-filterinboundip-group3000rule9system-index52
packet-filterinboundip-group3000rule10system-index53
packet-filterinboundip-group3000rule11system-index54
packet-filterinboundip-group3000rule12system-index55
packet-filterinboundip-group3000rule13system-index56
packet-filterinboundip-group3000rule14system-index57
packet-filterinboundip-group3000rule15system-index58
packet-filterinboundip-group3000rule16system-index59
packet-filterinboundip-group3000rule17system-index60
packet-filterinboundip-gr
升级会员 