H3C_SecPath系列防火墻基本上網(wǎng)配置(最新整理)

1、新手可以根據(jù)下面的配置一步一步操作，仔細(xì)一點(diǎn)兒就沒問題了！ 可以用超級終端配置，也可以用 crt 配置如果配置了，還是不能上網(wǎng)，可以加我的 qq：957602411恢復(fù)出廠設(shè)置：resetsaved-configuration配置防火墻缺省允許報文通過：system-viewfirewallpacket-filterdefaultpermit為防火墻的以太網(wǎng)接口（以 ethernet0/0 為例）配置 ip 地址，并將接口加入到安全區(qū)域：interfaceethernet0/0ip addressip 地址子網(wǎng)掩碼quitfirewallzonetrustaddinterfaceetherne

2、t0/0 quit添加登錄用戶為使用戶可以通過 web 登錄，并且有權(quán)限對防火墻進(jìn)行管理，必須為用戶添加登錄帳戶并且賦予其權(quán)限：local-user登錄賬號passwordsimple登錄密碼service-typetelnetlevel3 quit quitsysfirewallpacket-filterdefaultpermit dialer-rule1ippermitaclnumber3000 rule0permit ip quitinterfacedialer1 link-protocolppppppchapuserpppoe 賬號pppchappasswordsimplepppoe

3、密碼ipaddressppp-negotiate dialer-group1dialerbundle1natoutbound3000quitinterfaceethernet0/4pppoe-clientdial-bundle-number1 firewallzone untrustaddinterfaceethernet0/4 addinterfacedialer1quitfirewallzonetrustaddinterfaceethernet0/0 quitiproute-static0.0.0.00.0.0.0dialer1preference60 save“”“”at the end

4、, xiao bian gives you a passage. minand once said, people who learn to learn are very happy people. in every wonderful life, learning is an eternal theme. as a professional clerical and teaching position, i understand the importance of continuous learning, life is diligent, nothing can be gained, on

5、ly continuous learning can achieve better self. only by constantly learning and mastering the latest relevant knowledge, can employees from all walks of life keep up with the pace of enterprise development and innovate to meet the needs of the market. this document is also edited by my studio professionals, there