路由器配置小段

acl number 3001
description From clients to tsm
rule 0 permit tcp destination-port eq 17889
rule 5 permit tcp destination-port eq 2000
rule 10 permit tcp destination-port eq 3306
rule 15 permit tcp destination-port eq 3288
rule 20 permit tcp destination-port eq 3389
rule 25 permit tcp destination-port eq 8080
rule 30 permit tcp destination-port eq 8443
rule 35 permit tcp destination-port eq www
rule 40 permit tcp destination-port eq ftp
rule 45 permit icmp
rule 50 deny ip
acl number 3002
description From internet to tsm
rule 0 permit icmp
rule 5 deny ip
acl number 3008
rule 5 permit ip
acl number 3099
step 1
#
sysname ***********
#
FTP server enable
#
web-manager enable
web-manager security enable port 8443
#
info-center timestamp debugging date
#
firewall packet-filter default permit interzone local trust direction inbound
firewall packet-filter default permit interzone local trust direction outbound
firewall packet-filter default permit interzone local untrust direction inbound
firewall packet-filter default permit interzone local untrust direction outboun
d
firewall packet-filter default permit interzone local dmz direction inbound
firewall packet-filter default permit interzone local dmz direction outbound
firewall packet-filter default permit interzone local tsm direction inbound
firewall packet-filter default permit interzone local tsm direction outbound
firewall packet-filter default permit interzone trust untrust direction inbound
firewall packet-filter default permit interzone trust untrust direction outboun
d
firewall packet-filter default permit interzone trust dmz direction inbound
firewall packet-filter default permit interzone trust dmz direction outbound
firewall packet-filter default permit interzone trust tsm direction inbound
firewall packet-filter default permit interzone trust tsm direction outbound
firewall packet-filter default permit interzone dmz untrust direction inbound
firewall packet-filter default permit interzone dmz untrust direction outbound
firewall packet-filter default permit interzone tsm untrust direction inbound
firewall packet-filter default permit interzone tsm untrust direction outbound
firewall packet-filter default permit interzone tsm dmz direction inbound
firewall packet-filter default permit interzone tsm dmz direction outbound
#
firewall session aging-time tcp 30
firewall session aging-time udp 30
firewall session aging-time esp 30
firewall session aging-time gre 30
firewall session aging-time h225 30
firewall session aging-time h245 30
firewall session aging-time h323-rtcp 30
firewall session aging-time h323-rtp 30
firewall session aging-time h323-t120 30
firewall session aging-time netbios-name 30
firewall session aging-time netbios-sessi
on 30
firewall session aging-time netbios-data 30
firewall session aging-time ftp 30
firewall session aging-time ftp-data 30
firewall sessio

n aging-time hwcc 30
firewall session aging-time ras 30
firewall session aging-time ils 30
firewall session aging-time http 30
firewall session aging-time smtp 30
firewall session aging-time rtsp 30
firewall session aging-time rtcp 30
firewall session aging-time rtp 30
firewall session aging-time gtp 30
firewall session aging-time dns 30
firewall session aging-time sip 30
firewall session aging-time pptp 30
firewall session aging-time QQ 30
firewall session aging-time stun 30
firewall session aging-time sip-rtp 30
firewall session aging-time sip-rtcp 30
firewall session aging-time mgcp 30
firewall session aging-time mgcp-rtp 30
firewall session aging-time mgcp-rtcp 30
firewall session aging-time sqlnet 30
firewall statistic system enable
undo firewall session link-state check
#
vlan 1
#
vlan 2
#
vlan 3
#
vlan 4
#
vlan 5
#
vlan 6
#
vlan 7
#
vlan 8
#
vlan 9
#
vlan 10
#
vlan 11
#
vlan 12
#
vlan 13
#
vlan 14
#
vlan 15
#
acl number 700
#
dhcp server ip-pool 0
#
interface Cellular0/1/0
link-protocol ppp
#
interface Vlanif1
#
interface GigabitEthernet0/0/0
description link to outside
ip address 192.168.100.2 255.255.255.0
#
interface GigabitEthernet0/0/1
description link to inside
ip address 192.168.1.200 255.255.255.0
#
interface GigabitEthernet0/0/1.1
vlan-type dot1q 3
ip address 192.168.3.254 255.255.255.0
#
interface GigabitEthernet0/0/1.2
vlan-type dot1q 10
ip address 192.168.10.254 255.255.255.0
#
interface GigabitEthernet0/0/1.3
vlan-type dot1q 4
ip address 192.168.4.254 255.255.255.0
#
interface GigabitEthernet0/0/1.4
vlan-type dot1q 6
ip address 192.168.6.254 255.255.255.0
dhcp select interface
dhcp server dns-list 202.100.96.68
dhcp server domain-name http://doc.guandang.net
dhcp server netbios-type b-node
dhcp server expired day 10 hour 12
#
interface GigabitEthernet0/0/1.5
vlan-type dot1q 5
ip address 192.168.5.254 255.255.255.0
#
interface GigabitEthernet0/0/1.6
vlan-type dot1q 7
ip address 192.168.7.254 255.255.255.0
dhcp select interface
dhcp server dns-list 202.100.96.68
dhcp server domain-name http://doc.guandang.net
dhcp server netbios-type b-node
dhcp server expired day 10 hour 12
#
interface GigabitEthernet0/0/1.7
vlan-type dot1q 8
ip address 192.168.8.254 255.255.255.0
#…… 此处隐藏：8594字，全部文档内容请下载后查看。喜欢就下载吧 ……