华为防火墙配置教程华为云空间官网

user-interfacecon0authentication-modepasswordsetauthenticationpasswordcipher密码idle-timeout00

0/0/0ipbindingvpn-instancedefaultipaddress192.168.0.1255.255.255.0service-manage

1.定义用户名aaamanager-user用户名passwordcipher密码level15

4.互联接口下开启服务0/0/0ipbindingvpn-instancedefaultipaddress192.168.0.1255.255.255.0service-managepermit

3.定义用户名密码aaamanager-user用户名passwordcipher密码service-typesshlevel15

4.进入VTYuser-interfacevty04authentication-modeaaaprotocolinboundssh

5.互联接口下开启服务0/0/0ipbindingvpn-instancedefaultipaddress192.168.0.1255.255.255.0service-managepermitservice-managesshpermit

6.用户的关联sshuser用户sshuser用户authentication-typepasswordsshuser用户

security-policyrulenametrust_rustdestination-zoneuntrustsource-address100.1.1.0mask255.255.255.0destination-address200.1.1.0mask255.255.255.0serviceicmpactionpermit

displayfirewallsessiontable//查看会话表信息displayfirewallsessiontableverbose//查看会话表详细信息displayfirewallsessiontableverboseprotocolicmp//查看icmp协议形成的会话表的详细信息

2.定义安全策略[注意要和接下来的NAT-策略对应起来]security-policyrulenametrust_rustdestination-zoneuntrustsource-address100.1.1.0mask255.255.255.0serviceicmpactionpermit

3.定义NAT地址池nataddress-group名字modepat//模式定义为Patsection0100.1.1.1100.1.1.1//定义地址池范围

4.定义NAT策略nat-policyrulename名字rustdestination-zoneuntrustsource-address100.1.1.0mask255.255.255.0serviceicmpactionsource-nataddress-group名字//关联地址池名字

nat-policyrulenameeasy_rustdestination-zoneuntrustsource-address100.1.1.0mask255.255.255.0serviceicmpactionsource-nateasy-ip

natserver0zoneuntrustprotocoltcpglobal1.1.1.1wwwinside1.1.2.1wwwno-reverse//定义nat映射并且不生成反向的server-map

security-policyrulenamenat_rustdestination-zonedmz//定义nat映射后的即可source-address192.168.1.0mask255.255.255.0actionpermit

[FW_1]1/0/0undoshutdownipaddress192.168.1.253255.255.255.0vrrpvrid1virtual-ip192.168.1.1active

[FW_2]1/0/0undoshutdownipaddress192.168.1.254255.255.255.0vrrpvrid1virtual-ip192.168.1.1standby

[FW_1]hrpinterfaceg1/0/6remote1.1.1.2（对端设备IP）

[FW_2]hrpinterfaceg1/0/6remote1.1.1.1（对端设备IP）

1.余额是钱包充值的虚拟货币，按照1:1的比例进行支付金额的抵扣。
2.余额无法直接购买下载，可以购买VIP、付费专栏及课程。