返回
h3c防火墙配置实例（防火墙配置域间策略脚本）
h3c防火墙配置实例（防火墙配置域间策略脚本）
2024-09-27 04:12:55  作者:心裡念你  网址:https://m.xinb2b.cn/know/bzj471788.html

version 7.1.064, Release 9304P05

#

sysname UNIS

#

context Admin id 1

#

ip vpn-instance management

route-distinguisher 1000000000:1

vpn-target 1000000000:1 import-extcommunity

vpn-target 1000000000:1 export-extcommunity

#

telnet server enable

#

irf mac-address persistent timer

irf auto-update enable

undo irf link-delay

irf member 1 priority 1

#

security-zone intra-zone default permit

#

password-recovery enable

#

vlan 1

#

vlan 49 to 50

#

vlan 70

#

vlan 255

#

object-group ip address DNC服务器

0 network host address 10.100.80.10

#

object-group ip address DNC机床

description DNC机床

0 network subnet 10.100.50.0 255.255.255.0

#

object-group ip address test

#

object-group ip address 机加一分厂触摸屏控制台

0 network host address 10.100.50.193

#

object-group service 123

0 service icmp 0 0

#

object-group service DNC机床-服务器端口策略

0 service icmp 0 0

10 service tcp destination eq 21

20 service tcp destination range 600 1023

30 service udp destination eq 2049

40 service udp destination eq 111

50 service tcp destination eq 2049

60 service tcp destination eq 111

70 service tcp destination eq 19000

80 service udp destination range 8192 8193

90 service tcp destination range 8192 8193

100 service tcp destination eq 502

#

object-group service 机加一分厂触摸屏控制台-服务器

0 service icmp 0 0

10 service tcp destination eq 8889

20 service tcp destination eq 8000

30 service tcp destination eq 1521

#

interface NULL0

#

interface Vlan-interface255

ip address 10.100.255.40 255.255.255.0

#

interface GigabitEthernet1/0/0

port link-mode route

ip binding vpn-instance management

ip address 192.168.0.1 255.255.255.0

#

interface GigabitEthernet1/0/16

port link-mode route

#

interface GigabitEthernet1/0/17

port link-mode route

#

interface GigabitEthernet1/0/18

port link-mode route

#

interface GigabitEthernet1/0/19

port link-mode route

#

interface GigabitEthernet1/0/20

port link-mode route

#

interface GigabitEthernet1/0/21

port link-mode route

#

interface GigabitEthernet1/0/22

port link-mode route

#

interface GigabitEthernet1/0/23

port link-mode route

#

interface GigabitEthernet1/0/1

port link-mode bridge

port link-type trunk

port trunk permit vlan all

port trunk pvid vlan 255

#

interface GigabitEthernet1/0/2

port link-mode bridge

port link-type trunk

port trunk permit vlan all

port trunk pvid vlan 255

#

interface GigabitEthernet1/0/3

port link-mode bridge

port link-type trunk

port trunk permit vlan all

port trunk pvid vlan 255

#

interface GigabitEthernet1/0/4

port link-mode bridge

port link-type trunk

port trunk permit vlan all

port trunk pvid vlan 255

#

interface GigabitEthernet1/0/5

port link-mode bridge

port link-type trunk

port trunk permit vlan all

port trunk pvid vlan 255

#

interface GigabitEthernet1/0/6

port link-mode bridge

port link-type trunk

port trunk permit vlan all

port trunk pvid vlan 255

#

interface GigabitEthernet1/0/7

port link-mode bridge

port link-type trunk

port trunk permit vlan all

port trunk pvid vlan 255

#

interface GigabitEthernet1/0/8

port link-mode bridge

port link-type trunk

port trunk permit vlan all

port trunk pvid vlan 255

#

interface GigabitEthernet1/0/9

port link-mode bridge

port link-type trunk

port trunk permit vlan all

port trunk pvid vlan 255

#

interface GigabitEthernet1/0/10

port link-mode bridge

port link-type trunk

port trunk permit vlan all

port trunk pvid vlan 255

#

interface GigabitEthernet1/0/11

port link-mode bridge

port link-type trunk

port trunk permit vlan all

port trunk pvid vlan 255

#

interface GigabitEthernet1/0/12

port link-mode bridge

port link-type trunk

port trunk permit vlan all

port trunk pvid vlan 255

#

interface GigabitEthernet1/0/13

port link-mode bridge

port link-type trunk

port trunk permit vlan all

port trunk pvid vlan 255

#

interface GigabitEthernet1/0/14

port link-mode bridge

port link-type trunk

port trunk permit vlan all

port trunk pvid vlan 255

#

interface GigabitEthernet1/0/15

port link-mode bridge

port link-type trunk

port trunk permit vlan all

port trunk pvid vlan 255

#

object-policy ip Any-Any

rule 0 pass logging counting

#

object-policy ip Trust-Untrust

rule 0 pass source-ip DNC机床 destination-ip DNC服务器 service DNC机床-服务器端

口策略 logging counting

rule 1 pass source-ip 机加一分厂触摸屏控制台 destination-ip DNC服务器 service

右环殖Тッ量刂铺?服务器 logging counting

#

security-zone name Local

#

security-zone name Trust

import interface GigabitEthernet1/0/8 vlan 1 50 70 80 255

import interface GigabitEthernet1/0/9 vlan 1 50 70 80 255

import interface GigabitEthernet1/0/10 vlan 1 50 70 80 255

import interface GigabitEthernet1/0/11 vlan 1 50 70 80 255

import interface GigabitEthernet1/0/12 vlan 1 50 70 80 255

import interface GigabitEthernet1/0/13 vlan 1 49 to 50 70 80 255

import interface GigabitEthernet1/0/14 vlan 1 49 to 50 70 80 255

import interface GigabitEthernet1/0/15 vlan 1 49 to 50 70 80 255

#

security-zone name DMZ

#

security-zone name Untrust

import interface Vlan-interface255

import interface GigabitEthernet1/0/1 vlan 1 49 to 50 70 80 255

import interface GigabitEthernet1/0/2 vlan 1 50 70 80 255

import interface GigabitEthernet1/0/3 vlan 1 50 70 80 255

import interface GigabitEthernet1/0/4 vlan 1 50 70 80 255

import interface GigabitEthernet1/0/5 vlan 1 50 70 80 255

import interface GigabitEthernet1/0/6 vlan 1 50 70 80 255

import interface GigabitEthernet1/0/7 vlan 1 50 70 80 255

#

security-zone name Management

import interface GigabitEthernet1/0/0

#

zone-pair security source Any destination Any

object-policy apply ip Any-Any

packet-filter 2000

#

zone-pair security source Trust destination Untrust

object-policy apply ip Trust-Untrust

#

scheduler logfile size 16

#

line class aux

user-role network-operator

#

line class console

user-role network-admin

#

line class vty

user-role network-operator

#

line aux 0

user-role network-admin

#

line con 0

authentication-mode scheme

user-role network-admin

#

line vty 0 4

user-role level-15

user-role network-admin

set authentication password hash $h$6$FXcqr ZUfkzh0xpf$FoUxGIL0XT92tC90K2jVEkPb

95M33o675GIBswGHmY1iFfkmEoA/5m37Bn8aOnghK8bXPJZRbEd6P9VLjopCdg==

protocol inbound telnet

#

line vty 5 63

authentication-mode scheme

user-role network-admin

#

ip route-static 0.0.0.0 0 10.100.255.254

#

info-center logbuffer size 1024

#

ssh server enable

#

acl basic 2000

rule 0 permit

rule 0 permit

#

domain system

#

aaa session-limit ftp 16

aaa session-limit telnet 16

aaa session-limit ssh 16

domain default enable system

#

role name level-0

description Predefined level-0 role

#

role name level-1

description Predefined level-1 role

#

role name level-2

description Predefined level-2 role

#

role name level-3

description Predefined level-3 role

#

role name level-4

description Predefined level-4 role

#

role name level-5

description Predefined level-5 role

#

role name level-6

description Predefined level-6 role

#

role name level-7

description Predefined level-7 role

#

role name level-8

description Predefined level-8 role

#

role name level-9

description Predefined level-9 role

#

role name level-10

description Predefined level-10 role

#

role name level-11

description Predefined level-11 role

#

role name level-12

description Predefined level-12 role

#

role name level-13

description Predefined level-13 role

#

role name level-14

description Predefined level-14 role

#

user-group system

#

local-user admin class manage

password hash $h$6$9R/xrcOboMeyKx5C$0bPaw7Q41dLHQp2X8AAdmTLTU8RGFVplQmWdU7VZG95

n 3Dh2SQlKUn nIIVZflQSgIhMWZzVFEqlXFMeecodQ==

service-type ssh terminal https

authorization-attribute user-role level-3

authorization-attribute user-role network-admin

authorization-attribute user-role network-operator

#

local-user h3c class manage

service-type https

authorization-attribute user-role level-3

authorization-attribute user-role network-admin

authorization-attribute user-role network-operator

#

local-user i class manage

authorization-attribute user-role network-operator

#

ip https enable

#

ips policy default

#

anti-virus policy default

#

return


  • 小鲜螺螺蛳粉（卷出来的美味の螺蛳粉春卷大嘴螺）
  • 2024-09-27卷出来的美味の螺蛳粉春卷大嘴螺这金灿灿诱人的身姿，侧看似炸鸡，俯视如玉米棒它神秘的外衣下，到底藏着什么样的秘密最近，略感天气渐凉，裹上衣服后的螺蛳粉没想到还有这样的面孔奢华的外表下依旧有着让人惊艳的内涵入口酥脆，细嚼之后突觉顺滑劲。
  • 2d横版动作单机手机网游（2021好玩的端游网游）
  • 2024-09-272021好玩的端游网游经过了差不多快一年的EA，《斩妖行》正式版已经于7月8日正式发售了这个游戏我去年写过一篇评测因为对它的世界观感兴趣所以还一直挺有关注的所以正式发售之后也是第一时间玩了一遍游戏的改动和新增内容都有体验到。
  • 珠海长隆海洋王国表演节目时间表（来珠海旅游必看的演出）
  • 2024-09-27来珠海旅游必看的演出《龙秀》是中国首部以龙元素为主题的原创剧，将传统马戏与舞台表演剧相结合的主题大秀剧情是由珠海民众耳熟能详的故事“渔女神话”改编而成，讲述南海龙王七公主化身为“渔女”，与男孩海鹏相识相爱为得到龙王的祝福。
  • 我有七个姐姐都是护弟狂魔（每一个姐姐都是扶弟魔）
  • 2024-09-27每一个姐姐都是扶弟魔有一种女人被称为“扶弟魔”她是《欢乐颂》中被原生家庭吸血到千疮百孔却依然流着眼泪说“妈，你偏心我不怪你”的樊胜美在上海打拼多年，外企资深HR，不说自己有多少存款，就连每个月交房租都很困难不管自己有多努。
  • 班级公约简洁（班级公约介绍）
  • 2024-09-27班级公约介绍为了规范各位同学的言行举止，营造良好的学习环境，增强班集体的向心力，打造优秀班集体，现制定班级公约思想方面：热爱祖国，热爱中国尊敬师长，与同学友好相处文明礼貌，不说脏话，不打架尊重他人劳动成果，不搞破。
  • 生育后女性体质会变差还是好（女性生育后身体）
  • 2024-09-27女性生育后身体文|羊驼妈妈（文章原创，版权归本作者所有，欢迎个人转发分享）都说女人是世界上最伟大的一类人，她们用自己的青春和健康，换来了无数的新生命很多女性在生产后，身体上或多或少的都会出现一些问题，就比如有些女性。
  • 乳酪蛋糕胚的做法（乳酪蛋糕胚怎么做）
  • 2024-09-27乳酪蛋糕胚怎么做蛋白6个、塔塔粉1小匙、糖120克、牛奶1/4杯、香草精数滴、低筋面粉90克、盐1/4小匙蛋白及塔塔粉放在钢盆中,不可沾到一丝油,水或蛋黄(否则会打不发)，用打蛋器打蛋白,打1分钟后加糖继续打，打6~。
  • 未了的了是什么意思（未了的了意思是什么）
  • 2024-09-27未了的了意思是什么[liǎo]完毕；结束：了结了账没完没了一了百了不了了之这事儿已经了啦!放在动词后，跟“得、不”连用，表示可能或不可能：办得了做得了来不了受不了完全（不）；一点（也没有）：了不相涉了无惧色了无进展姓明。
  • 孙杨黄子韬谁大（真男2黄子韬和孙杨）
  • 2024-09-27真男2黄子韬和孙杨初入军营时，孙杨就展现出爱笑逗趣、金句频出的一面，而黄子韬的个性十足、我行我素由来已久，两人耿直又倔强的性格为他们吸引不少粉丝关注而“水中霸王”孙杨和“桀骜野马”黄子韬，在班长王威的带领下，也越来越有。
  • 日元兑美元汇率创32年来新低 日元兑美元汇率跌破149
  • 2024-09-27日元兑美元汇率创32年来新低 日元兑美元汇率跌破149中新网10月19日电据日本共同社报道，18日东京外汇市场日元汇率继续贬值，一度跌破1美元兑149日元，时隔32年再创新低报道称，在9月22日受到干预后，日元汇率一度回到140至140.5之间，但不到一。
  • 圆柱体积题目看图（圆柱体积-用长方形卷圆柱）
  • 2024-09-27圆柱体积-用长方形卷圆柱问题将一个长9.42厘米、宽6.28厘米的长方形卷成一个圆柱，圆柱的容积最大是多少？解析(1)长方形卷成一个圆柱(这个圆柱是无底的)，有两种可能：①圆柱的底面周长为9.42厘米，高为6.28厘米；②圆。
  • 鼻子上挤出来的螨虫为什么这么多（鼻子不断有白色小米粒）
  • 2024-09-27鼻子不断有白色小米粒皮肤专家发现，人们已经被螨虫包围了，有三类螨虫在皮肤测试中发现，疥螨、蠕螨和尘螨，不同的螨虫大小、形状不同，由于对螨虫感染没有免疫力，所以会很容易传播到每个人身上，你的脸上很可能都有成千上万只螨虫健康。