華為防火墻設(shè)置

1、用戶(hù)名：admin密碼Admin@123第一次配制時(shí)，可以設(shè)置本地IP自動(dòng)獲取。也可以設(shè)置成IP192.168.0.X255.255.255.0(x=2254)防火墻的IP:192.168.0.1配制如下：#sysnameUSG2130#webmanagerenable#infocentersourcedefaultchannel4loglevelnotifications#firewallpacketfilterdefaultperm

2、itinterzonelocaltrustdirectioninboundfirewallpacketfilterdefaultpermitinterzonelocaltrustdirectionoutbound#firewallpermitsubip#dhcpenable#firewallmoderoute#firewallstatisticsystemenable#setrunmodefirewall#interfaceCellul

3、ar500linkprotocolppp#vlan1#interfaceVlanif1ipaddress192.168.0.1255.255.255.0dhcpinterface#interfaceEther000#interfaceEther100#interfaceEther101#interfaceEther102#interfaceEther103#localuseradminlevel3localuseradminftpdir

4、ectyflash:authenticationschemedefault#authizationschemedefault#accountingschemedefault#domaindefault##slb#userinterfacecon0userinterfacetty81authenticationmodenonemodembothuserinterfacevty04authenticationmodeaaa#commonup

5、dateautotime2:30updateserverdomainsec.#surfbehavi#ips#protocol#mailfilter也就是說(shuō)，里面存在一個(gè)默認(rèn)的vlan107個(gè)網(wǎng)口都屬于這個(gè)網(wǎng)段，而這個(gè)網(wǎng)段的IP是:192.168.0.1255.255.255.0用網(wǎng)線接上fe100口，我們來(lái)做如下的要求建二個(gè)vlanvlan100vlan200Fe101fe103屬于vlan100vlan100的網(wǎng)關(guān)是192.168.1

6、.1255.255.255.0Fe104fe107屬于vlan200vlan200的網(wǎng)關(guān)是192.168.2.1255.255.255.0Fe101fe103要與Fe104fe107通信，則Fe101fe103的網(wǎng)關(guān)要設(shè)置成192.168.1.1Fe104fe107的網(wǎng)關(guān)要設(shè)置成192.168.2.1Fe100的配制不變，還是處于默認(rèn)的192.168.0.124段步驟如下：把網(wǎng)線接在Fe100電腦IP可以設(shè)置成自動(dòng)獲取也可以設(shè)置成192