JuniperSSG防火墻配置手冊(cè)

28282828JuniperSSG防火墻配置手冊(cè)6616初始化設(shè)置 Internet網(wǎng)絡(luò)設(shè)置一般策略設(shè)置 VPN連接設(shè)置...1.將防火墻設(shè)備通電，連接網(wǎng)線從防火墻e0\2口連接到電腦網(wǎng)卡。2.電腦本地連接設(shè)置靜態(tài) IP地址，IP地址（在/24都可以），子網(wǎng)掩碼,默認(rèn)網(wǎng)關(guān)，如下圖:lillcxEMrrfr說(shuō)［TCP/IDMt13.設(shè)置好IP地址后，測(cè)試連通，在命令行ping，如下圖:丄?別刪畑4-斛詛？lillcxEMrrfr說(shuō)［TCP/IDMt13.設(shè)置好IP地址后，測(cè)試連通，在命令行ping，如下圖:丄?別刪畑4-斛詛？》itn■'■■?Z.IU.1.1Hie37b戸悶*F?:-iHETTL44run■舛?!：splrfpaih：*piTfp*'fJ^ii9±-ua.i.riI tilI時(shí)JLH.LI：hF曹— TW*byiet-ia"加-1耐TT%*19±-Lta.l.LlbrL<E-a2L丄H啦.rTTL44IP1^54-E-hrlttl<sForIfZ.16(.1.1=Fdr)H-E.a；WeI-"I-bcvIvcd■1.UiiL-B<6^knr?.:“書(shū)』??匕?rawiHtjiJptIML百nnilli-aifl-conrlxlriAKlF^F?If?.fiMrrwfr■Irs，如下圖向?qū)нx擇最下從IE瀏覽器登陸防火墻web頁(yè)面，在地址欄輸入，如下圖向?qū)нx擇最下面No,skip，然后點(diǎn)擊下面的 Next:!>yidlvj->Ln.lTiiiu.

HriKlELfileI-ubJ■-如PM??-屈I也"JtttTJttfl^i■■丫 噸Mg工*2-L■主-tTH蟲(chóng)EHA-L■主-tTH蟲(chóng)EHA宦金-]ipLL5>u>.1j3ird—C^TiEiiLdifilbWetomrtoti-icRsEorplcrymrntvdiflfd-QYfls,u?thflMiningRjpulIZuplavnidnt匚nn與口電Ota:QYfls,u?thflMiningRjpulIZuplavnidnt匚nn與口電Ota:[泗Ell?]5adCor*f^rtEm-畫(huà)Nd,3hpthe-W^ard■andwatrnEttoIhrWebUCmar**aenmtSMawir?bead.晉Eeki.ErXxchUh晉Eeki.ErXxchUh?FFXjipi5.在登錄頁(yè)面輸入用戶名，密碼，初始均為netscreen,如下圖:TindupiItiCLIluTindupiItiCLIluL￡emLveci:-色■免育?t?kvriicn甘凳曲金-脣I士?窗-閔1*3.1.I:.二、：M?| *1^:取（WXAru蘭決玄B時(shí)世厲呻上-色科刖竝；邑電A旳啟Qgu^ibAdminNome:Pwiwont■IlHiiiHnUiHirtiyfiriA“Mil^A^wiii:16.登陸到web管理頁(yè)面，選擇Configuration-Date/Time,然后點(diǎn)擊中間右上角SyncClockWithClient選項(xiàng)，如下圖:\f^HIE^TI：Iisl:JujiLpre-Sux-rrirf^SC.J.Dx2_D-IEgg-IE-QQRAtA±4電A 電■if^EU'L^/yniprir~?a'hi^E'E-IQrZ.PEBJuntpcfI^Hfnniuur曲IIIHEE"nliwDhiappunlM-'-Lir?nl4faMLA*R^dScUhvMCTMHUhIPoliniWNenii^0>RtporhMat■血HH|.Lq^{?ritiin^HjiinlioHAl.1^rr/r^BTHg4x?rlihSetTln-eZone h-our9!°<mmjlC9homGMTElAurnin胡認(rèn)％Jid.屈 Fnrd血.hP^gnigrhiMignClf^I)I麗讐］□Aut^>rbiStkaBv-bvncbrMikzfi*thhklihtdM?tnnu-SAfVdrfNTT}ufid卅F*也mdixfc?AryHaKhnLHTitimeMljLKtmtrrtii/thteUcflUwrxjdTPrim-aryserverIPyn?mePWH?i?ry*mHrEi^yifPiriiriLit廿SccarwhOnacquiredOPr^rarrad-Mhia|O_D.D.OEo*jroeInttrfflcel^rphhnwdr曲dupHrvofliryNArviftGfldnjpMrvwlKeyIDEJdftJPfflFWfiKflWIDStHJroBiFi匕rt?sPreskaredM>vKihii-emInEVfifPFiftBrwwriKflvBonflh?7.選擇Interfaces-List，在頁(yè)面中間點(diǎn)擊 bgroupO最右側(cè)的Edit，如下圖:\f^HIE^TI：Iisl:JujiLpre-Sux-rrirf^SC.J.Dx2_D-TinJuu!tiIcievc-EE-J■主-E ETH蟲(chóng)HHH免trtt儡金-:TAnJ-ConfigureaH^work,iBaHwIrtw(1祜］Hg4x?rlihnHJiiiihM〔pnliShFBgPwiftii］D曲JUAI.IMait匕WSPdll邯K?baru-LdfHfl1 rtflnwJF/NuE卻鼻JgieivptLinJkPF^dEIbgroMpDTnrstLJffW2沖rthr<ntt(V：Vp1 dUurndtonctb^petoMDfz?n1 DthArnatQ/'S□own-Et血pete冏Df^wnbgroMf^lO.O.a.EVDlUUnm4d口酹nbfFDLpS口口“mehbjIfrTJwd&c*irb^iOMpl(LD.D.EVDMui■jniuod口own-蟲(chóng)Rem旳Unr^JSl.IJffF-JOc^ncttiDmatn^ld.M.EVDDMZLjffwJ口own「ENO矢—nd.D.D.EVD■hIAM□c^n-和5卄幗IW■.l■■?M^F?：glW^BW啦^Pi■gOT■H1EPaE］科刖lLd■-El如！H卄才aS「亜『韋：g■■夕■witlJ'Xil.,8.此端口為8.此端口為網(wǎng)IP地址，如Trust類(lèi)型端口，建議IP設(shè)置選擇StaticIP,IPAddress輸入規(guī)劃好的本地內(nèi)/24，ManageIP。之后勾選WebUI，Telnet,SSH,SNMP，SSL，Ping。如下圖:TLI1T=:JLUILPCE"Su,Tinduv.3:EVl-VELI--匸邑T|rT±Hni■7-C:SC1:SC14a.].ItttTJM?| 啪l*ru?HwLg典2DHiJtX3 -匸屈嘆±電■電A 電Qjiif^EU-LiJ/Xniprir-?a-hi^E-IQrZ.PConligurnhiHTrufftZhi?NarvikH<AV￥5d-k,iFlprirtre^SVilrlTkp4-HriiliMJunFoef^^■IriipivdiuIQCbtMnITU5ln[>DHCROObE^iVu4lr#^?[hGf①SfeAtlcIP匚IAutenubeLC-zbtEDHCPserverpvdnKtersHuu]Q2.]6a.J2.]SHdrggdab中JPblli^JKcpont■a町■qcIPn]4Z.]C4.2Z.l1htalpLo^m(2)MATQRoJtiBkbcklinlriB-BxjbMlmtfficQServiceOpt4?i,?? ?4 ? 0WebU[MiiruinRinwilMrrvwn—7 0ENMPOtrurSK^MiH□PngHDOdmuFnTh*BusierUMt[*rnj)AdmnMTiJDN5Proxy口C111^-EVId.Jgi.0Idnet囪SSL口PfldlMTU[IFiW回S5H□[(knl-rewtB^bK；Dpdrai7igHIU:lEWl;DvbUtMTU:15DDJInternet網(wǎng)絡(luò)設(shè)置1.修改本地IP地址為本地內(nèi)網(wǎng)IP地址，如下圖::SCIda.].I?~ttL￡a；昭C-DITAI騷瓷部觀聽(tīng)船錮sr^i：如否MIFIMteSBiSTfflflS:rmttiIT4社q*：干HU咼也)?hLI朋betm￡2E國(guó)n用下砂XIF^n址叩TA[K；昭C-DITAI騷瓷部觀聽(tīng)船錮sr^i：如否MIFIMteSBiSTfflflS:rmttiIT4社q*：干HU咼也)?hLI朋betm￡2E國(guó)n用下砂XIF^n址叩TA[K■丼■￡!E崩》eV?H^i、I右1釣』!丄￡也ESmO^H]B^dcTplfwte<fBCglIbI御ssL?畑WtH?ri0diU±W.-rt茫Lm□ilpl回￡SK□CdAnrimrUSjfatmnM^U:]5M; 15Daijtra^10^iBtpanit j[ft*ISSLZI壬航IJI04<idwidrhM-KrvjTiBjnrJpidKi|P—LdfiHip..tq*時(shí)?「■:』，?匚IngrdBCMkelitifianceKithDJKbpiI.'■■■■.1■F7T||I*4IX+awfis-_Ji 2.從IE瀏覽器打開(kāi)防火墻web頁(yè)面，輸入用戶名密碼登陸，如下圖:|zluEJti—TinduvaJdElieuL￡em1*enr團(tuán)図1■Bd ]忙i4a.起1?_-tXI； 4-XttTJttfl^i■■丫啪ML慮射工Aw.rtHhArgaiJfrX4 -e諦馳曲電.電A 電O^L^ib-二■主-E.?軸tt?nTH蟲(chóng)EiH吒-、二 '?fr-刖歳垃"anTAnJ-?- ■+aw?+aw?、3?選擇Interfaces-List，點(diǎn)擊頁(yè)面中ethernetO/0最右側(cè)的Edit選項(xiàng)，如下圖:YLi1 :JujiLprE-SlL-rnrDSC.J.Di2.D-TinJuvj曲i4a.±2I-C 電.電A旳赳■if^EU'L^/yniprir~ra'hi^EE-IQrZ.P:EpIUELI匸仔序-_,X4?-E?泗tb"1TH蟲(chóng)HRa*A*tt￡牲-匚Art- TAnJ-IBMPCr>nfl^u<^H-g4-HriihEmikiI■胡iRFV*.仇初erIBMpef1 n-n?nvNu何D汕m*ig■VPtLin*bgroMpD1 13.曲.22.1?Irxjttj_^r3申rthwnrtCV：WdtrurndtO/31DdmiIcthmetoH&P呦DtrHrnptQ/51DdmiIM呦b^roypl1 aO.D.EVDMJI\UhLiHdDdhltiI11.O.D-0/DIMjlMbWlbgiOMpl( O.O.D.EVONdliJhLJMdDdhwi'5wr、MhticViBmatDf11 d.O.D.EVODHZ1DdktiI零ENO0.0.40/0叫1矢HVrtviril1 O.O.D.D/0VTJWLdrynr^Down1Edd魯hnlbtui.,仙："7GiilS-na-id.Jgi.■眄J'“.坯碟弊詡I4.此端口為Untrust類(lèi)型端口，設(shè)置IP地址有以下三種方法:（根據(jù)ISP提供的網(wǎng)絡(luò)服務(wù)類(lèi)型選擇）A.第一種設(shè)置IP地址是通過(guò)DHCP端獲取IP地址，如下圖:TLi1 :JujiLprc-3lLv-rirDSC.J.Di2.D-TinJuvjKJfIUELI□畫(huà)醫(yī)302i4a.±￡IHE-C辭址丸±電.電A旳赳0^iif^EU-L^f*c,ipdr-5-a-hi^E-IQrZ.P-_i*牛-F?免育?t?亙T|rT蟲(chóng)sn楚ftAtn曲它-匚M-刖起國(guó)亍班3lAnJ-^^■mraniurSSEfiLEi^^FHuiiihfl[qnligurDhoo3gHTTh「igIZuut.AubomabeL<-:latcDHCPserverpv*，m?teck3 b-F.rirl>H]4-HrillSontv噸PLofiaCbtMfiIFtJ5ln[?DHCP魯Ehl?飢I.砸LM?*-itC-C■■^--na-i11Jgi…n!FWk啊5,"豳略畔疥!B.第二種設(shè)置IP地址的方法是通過(guò)PPPoE撥號(hào)連接獲取IP,如下圖，然后選擇Createnewpppoesetting，hseG-Tl：l丄偽：:JuJlLEiduvjIjiI爭(zhēng)二.■]忙Ifta,aI 二—衣ML慮*工Aw-」■主-E 電w蟲(chóng)EH戟宦ft*tt畐今-刖fr垃"旦空呀TlAU-9-0iHaFvIrty>k.ilr^?D41?rill0^■if^EU'L^J\ai E-IQrZ.PI-Kiiiiih包C^nlisnvDbiH「上H■晌5SfiOEdvPCiIlLV$OIjCAbiWu^lA^fVPcf U^3I|*Ocjte-nevipppwsettmnQstaticIfIFAddMU/y1占0NdTiAgdabkHa>i?qcIP■aG：D.g_Mt.ftM.tKfcD-Serviceyiilw<i3-MAiugftimuitAarutcftc段"r 0EHMP0T*帆0SSL回SSHOtherSsTvIcHi0Prig□PaEh□CdAnr-fHf-rMMilrHjml*B?i3lerUn^t(MTU)AdmnMTkf|o !Pvt?i<iprratmflrrru：IWD:Pefjdhmiu：0CbtHfiITvsInrvDHCF*150Q]□AutcRHbcL^dat口DUCTserverpirjm?t*r=w-HliAuEh□ ]p-AddressC-MP0|OOX)-Q]DSSLtMv和士『ngI出蘭1/?祐4炯11口18）阿斗切碩37昨（：￥7竺?竺1門(mén)-"?hg?血；5懇］亠:?Eni*”!.霽iifS-Eia-i11Tgi.,fcE尸玄坐hlMMl在如下圖輸入本地ADSLpppoe撥號(hào)賬號(hào)，PPPoEInstanee輸入名稱,BoundtoInterface選擇ethernetO/0，Username和Password輸入ADSL賬號(hào)密碼,之后OK，如下圖:TLi1-K3:JujiLprc-SuL-Trirt^STinJuv；!IjiIciek-[EepIueli:sei4a.鮭I-牛-n■免育?t?47ri±=A電凳At仕畐網(wǎng)JurHper刖班3lAU-#-QQiif^EU-L^f*c,ipdr-5-a-hi^E-IQrZ.PEnabld-0PPPnlb-FrirC?D4s?riil金-f—Kiiiiih]〔FonligurDbin日■出叩BoLRidBInteffaceUsername-PAHVwmlAuttHfihlc^hlQnMcfcipI?ftP'K.KDllLf腳3,0^:Hfipant匚IpPcccu*Cwnritroi-ocDefaultRwlcMetricNHEni^hhAutD-CanrKctiJItPbnin*iec1Cl?arIPorfiDhcotfindftIBthflcnatQ/Vm*AutoimartlcUpdaieoTDHCPSorvm'CNSPuhAinatArcBTFM?W卿丈魂磴MPPPoEPPPoE撥號(hào)設(shè)置完畢之后，點(diǎn)擊 Connect，如下圖:PPPoEPPPoE撥號(hào)設(shè)置完畢之后，點(diǎn)擊 Connect，如下圖:I芒HXE(Jyi:i1i.3:JujiLprc-Suxvnrf^SC.J.Dx2_D■-I-e?RAtA±電電A 亂.-口■衛(wèi)-岌■Mhbfc?電TH蟲(chóng)EHA免trt煜今-:刖ft垃"旦空呀TlAnJ-?-pppMJtlest^noEiriccnacrUMrKflc-Drm?triDVIHrtcwn■Wfir?qurccthfin-rttaJD?xttinaEd3c.St].r￡.Od.?.cQV?E口《ddCiXTWCt-Edg RjEd皿iPPMrU.(I期■h^iiiHEE-C-nnliguTD02■if^EU'L^/yniprir~?a'hi^E'E-IQrZ.PjF^Kripr"h* 靱回到Interface-List，可以看到此撥號(hào)連接的連接狀態(tài)，如下圖:ethernetO/0右狽5PPPoE—欄有一個(gè)紅叉，表示此連接已經(jīng)設(shè)置但未連接成功，如連接成功會(huì)顯示綠勾。DCCEePl4^ELI◎匚?M±+*TJ *1^：取■4,工Av..杭■決 .-XB怡叔■亞e -ewRAtA±4.電A旳邑02iif^EU-L^/Xnipdr-5-a-hi^E-IQrZ.P:sei4a.鮭IQJujMpef｛衛(wèi)Eijdup?DHCP些115■HiiiiihEE-C-nnligwDbtomH?paruLIMPi-nmeDdmiDdwtiMbWlDdhw9DdwhDownMmi+p4HriiliIrxjbt■vpt13J3.22J口*etb?<nttq/ZdtrumatO/abgroypl1 a.o.o.n/onui\iVlOHdbr^yjpZll.O.D-OfDN」lU-UKdbgroMpmao.D.moNlJIiJhuMd?ttiarnDtO/0O.O.D.EVOUhtiuskL^ya口fl.Q.GDfDCWELfflrtr?saraiO^aO.D.EVDMlthLtHd*4*1]fl-O.D-UfOVLflflL?yrr>BUwrnatO/Sctb^nettVflh""IWIWal■■^gK^K■^7ll■^：：^M■M^7并lm?k^^7MKFTVlL^Lm-E■■呼CBlypWDdmi?Eni?T?ui.C.第三種設(shè)置IP地址方法是設(shè)置固定IP地址，如下圖：選擇StaticIP,輸入IP地址和ManageIP：/30，勾選WebUI，TeInet，SSH，然后點(diǎn)OK。UUjfS-yi：lx^l:JujiLpc-E-□MO--uXttTJM?i 衣ML慮射工Aw畀齣W-MA 首 -e<HRJttA±p電A 口J忙i4a.琵I02■if^EU'L^/yniprir~?a'hi^E'E-IQrZ.P-J■主?史?Mhbfc?ETH蟲(chóng)hHe免trtt儡金-M-刖丘垃" TAnJ-?|-Fi^rkiI列“刊WAF」l話^Junipef業(yè)臨MP ama:WPPToIfftBfacgLliil^^niiH1C?nligwDb?nJHvrwwhRmliiil田Hvfc；-Sdoulist

fijJup

DHTP

aonxIntMflceMflEi匕■ethpriEin何ZrtbIb+rijrt*Z?i?NameTi55*?H?u<iOCbtD4nIPtilingDHCP-QObC^iVu<；lr*9?Pcf①StAElCIP□AlibPfTHbcL<-:btDDUCTsrrvrrp^jm^tersHuia寸E；ltflLDSHlO.lO.lD.L]Ci.!O.IO.LMt.ftOd.tKfca0NdTiAgdabk設(shè)置之后顯示如下圖:O匚，KSttTJM?i*1^1衣fll主工>2*fl^We -e<HRJttA±4電A 口02■if^EU'L^/yniprir~?a'hi^E'E-IQrZ.P畫(huà)掘!阿*也11科iwirfiai|-lcsI—Bj[AdpOHCP'MfllllHMC?nliguPDbinMkTwehIluipj^h-J■主?史?Mhbfc?ETH蟲(chóng)hHe免trtt儡今-F*rt?arfcil.rlrtw(I如]H-041?rillri-nme胛ywetm燈川fmig■yptLin*IbgfDMpD1 ig曲4.3仲I(mǎi)rxjtt屮rth^nrtCV：Vp1 dttbfirndtQV311ctb^petaXM呦] DthArnatQ/'S11DdmiEt血pete冏M昕bgroMf^l1 d.O.D.EVDnuiJUhLiHdDdhltitsFDLpS11.O.D-0/DHiJI^>KJMdMbWlbgroMpl( O.O.D.EVOrnJI(iJhuMdDdhtiig.]Q.ID.l/H5弼IiJlrtrJMhti?ttiDmatDf1[ d.O.D.EVODMZ1 ijf^ar2QflhTI「ENO0.4.40/0叫1矢HT^1 d.O.D.D/OVLW1tjryDrJDownbSJA■心mg.Edd魯Em*?譏Routing設(shè)置靜態(tài)IP地址之后，需要設(shè)置一個(gè)路由下一跳才能正常使用，選擇RoutingDestination，點(diǎn)擊右上角New，如下圖:'l：lXmL：JuJlL^E-列（［J ■■丫衣Ml慮*工Aw-n■主-E■MhbftTriinn電免trtt儡金-Hiiiiih3[pnii呼-■tienMuta

Rinhij

DJA

^mSE-1Us-列（［J ■■丫衣Ml慮*工Aw-n■主-E■MhbftTriinn電免trtt儡金-Hiiiiih3[pnii呼-■tienMuta

Rinhij

DJA

^mSE-1Us-fijcAup3m治rfaaPffftMOlcchu徑iLiPftW.10.]O.q/?flUihiiE巾oWoPJWtlQJO.JO.h/32flthonidTO^RootbgrouptrHnctl?2.16fl.22.V3：H^w<^rk,BiHrtingxxgC-iirul區(qū)」unlp0^■if^EU'L^/yniprir~?a'hi^E'E-IQrZ.Pflfciti”midlAiD-Mfttrl匚*滬▼JetwrfluSt卩Pnrwwnont-CCornecteJsstAbchnHhPbgrciupi)Iimported 轉(zhuǎn)pt時(shí)PAAuto?臼pwlHdtB[BCPHDOt-0OS^i-ElO護(hù)■ typEIHHortRmjbeRHIPEZOEPFuKfn^tvp?2Q■_TPIPAddress/Newmask設(shè)置O.O.O.O/O,NextHop選擇Gateway，Interface選擇ethernet0/0.GatewayIPAddress輸入ISP網(wǎng)關(guān)地址，此處例如為:，如下圖:liL:JujiLpcE-SlLv-nrDSt>ELI:seI4a.f2I-Q■_TPIPAddress/Newmask設(shè)置O.O.O.O/O,NextHop選擇Gateway，Interface選擇ethernet0/0.GatewayIPAddress輸入ISP網(wǎng)關(guān)地址，此處例如為:，如下圖:liL:JujiLpcE-SlLv-nrDSt>ELI:seI4a.f2I-p*牛-F.■免育?t?昌T|rT蟲(chóng)sn電凳留tn曲金-刖fc(t"班3lAnJ-馳“0^iif^EU-L^f*c,ipdr-5-a-hi^E-IQrZ.Pi/i?3■iiiihina?MhII曹|nlrie^n匚ifiiirHmn>H]4s?riih■區(qū)」Ltn帀etVirtufl-ftflvterNflmphruit-vrIP切證jO.flL.DXLHiiiiihQCcnlisriTDbQnITIHntliijlfeIL■"9—-SfflES-NflsrtH<ipCvwtwil^oul^rCmftnnzc|JQIujrtran-TT*InrnL觸irkeitii?Q/a-C^rnwAyJl> iQ.iQ.rD.SPwTHficrrt□亦9|D IConedII-p?.釘LF—CT爭(zhēng)'B-jg^B-fiwn^□壬再g-rfflffi ,口 1魯Enim ?s,七哄'g妙";:^9口f笳iilS-nrid.Jgi3、m；:?FTTijifi"習(xí)EnWXiEiilS-nrid.Jgi.設(shè)置完路由如下圖:TLiijil:JunLpcE-SlLVE-irDSC.J.Di2_D-TinJuvj:EPIUELI曲i4a.±2I口l2/yniprir~ra'hi^EE-IQrZ.P-J*主-e?姑婭?邑TH蟲(chóng)hh呂鼻A*丸畐牲-H^wfirk>DiHrtingn I-nlrt^HxxgC-iirul5「AL1-JlElUftlEimtBEXwhEurt-vcIruat-H^rKuiiih3CpnIigwDhcn"Rnfli出DKZuuI尸g-List□-HoMrrq'、、EM^nMUmUlJrtacBRlnn0iiyngRouncfrLP/N?tmACk10-10infi/WlOLia.iD.iyizLK.L6S.22.L；3J0aao/g■Acbwtr-Duba-P丹㈣譏Dl?>narnclihtdriacftPfOtOCDlPretenncftMatrix V印EIDJOJKCCOTTrfiCtadJ吐別*K(NNHRPethermW/Ddi±ifirn￡10/DbgroupObgrciupOctb^netO/DImpDrtDdHootRDOtFV?tRDOt?BEBCPO口SfiFElOEPFulvndtvpd1HH?tHoJbfi>9 ftB|P SIflSff和吟切g(shù)艸a2鑼Eni*■譏 廠去也i-..紅■亡ii^-Eia-i11Jgi■> 匸討? "BjjT?Bl5^-口-bE?'^口JE5.設(shè)置DNS服務(wù)器（如果是DHCP或PPPoE可能無(wú)需設(shè)置此項(xiàng)）,選擇Network-DNS-Host，在如下圖可以輸入主機(jī)名稱和DNS服務(wù)器地址。hseB-Tl：I.XjJ.:Jujil^e-屈i4a.±￡II+HtJ4M謝*1心1 JLHQ.JtuKA、ABnuitx*-J■主?n■Mhbfc?邑TH蟲(chóng)EHf?鼻ft*tt畐牲-0^■if^EU'L^/yniprir~?a'hi^E'E-IQrZ.P料■■命料■■命■witlJgi.. 1F7Tl』lRli料■■命料■■命■witlJgi.. 1F7Tl』lRli6.設(shè)置本地內(nèi)網(wǎng)DHCP功能，選擇Network-DHCP,如下圖:點(diǎn)擊bgroupO右側(cè)的Edit?-?cIttTJMll?i*1心1也AlAMXHQ"tuhA"Qautxd■if^EU'L^/yniprir~ra'hi^EE-IQrZ.D-主-宦.■盤(pán)frtt?e_Tri±EAQ鼻A*tt￡卷-Art-刖起広“ lAnJ-DBM^3I^?PPPA電IIIHEECpnligurDhinHriwork,|>IH：P(II*、H-g4i?riihliiEJuntDETWtrfflceDHCFSrrvktCwiNvurebgreupO^1Q2.lAB.2i.1,-24J54r\4rEdt址klPK如 1RdporetthwTffwraOo.]o.Horr?mdmdU)/j<o.o.a.[va'>NdiKEditiQIEhIAnrtk^Rty4；rii杠譏詁'七i■爐'-1'EV ?亠--m匕tt^-aa-id.Jgi- -- .叫I"劣蟲(chóng):嶺回鴨口17.選擇DHCPServer，其他默認(rèn)即可，如下圖:曲匚.m2-*￡- e.^n±EAQ.jfcA*R￡今-H-g4i?riihJtttTJttfl^i■■丫衣ML慮射工Aw陽(yáng)MAzQShiJfrXd-*￡- e.^n±EAQ.jfcA*R￡今-H-g4i?riih0^■if^EU'L^/yniprir~?a'hi^E'E-I□r2.□iPIH：P,lAFra?DEINS呦IIIH3CpnligufDhHiPPP一Baww-=H?IDhSP■4AnAonIII論iTaa:bgroLvD([P/N?tHUSkJJ些2.1宙a.J3.“34}門(mén)NarMQDHCP-CllcrrtOd”匚PHflav4vent?DHCPServerserverHwlc?ouLu ZtudHe二gd*CjUNmitndE站I?]djv=|qIboLTsbIEryutts0UpttalcF?nUp鬥豈MiZWElirofiIncAiF^.A刪“心血wwi"Ia.O.OjOim&^ib.Q』jghkxicFromEntarFiKbpkxtigbort*FrofTiE>ipuCI吐■口血U INATinxk2E5.2E5.2S^.OWENFff1luQ.O.E]■3O￥c亶tServerIpqAdvancedlaptfii■& ■MdFxcxTtaftiwHapiifft3血inQprtjom<\.Wi'&設(shè)置之后顯示如下圖，還未分配地址池,uiE^TLii±5:JunLpcE-SlL-rriil^SC.J.Di2_D-TinJuvjIn:EpIUELI□SEIX[2_-口口l2/yniprir~ra'hi^EE-IQrZ.D-n*土-口-Aji曲?fc?eTH蟲(chóng)HH4?鼻A*tt￡牲-IP^rHneaa-CoMIgim】PryrHHf-lwork,0IICP,IHITP*rMFr 沖Hg4i?riilihlMACMXuHaentryaualabta曲IIIH〔pnliShVBh?DMi-P^RTLose*PPPDSf>：?jsa1'JfbSRI?■壯?fs*?eS皿1■rLxsto"■FfTiii護(hù)I9.再選擇Network-DHCP，點(diǎn)擊Address，出現(xiàn)如下圖，輸入分配地址池::EPIUELI?u廠置JtttTJttfl^i■■丫衣ML慮射丄具2aMANQn切ItX曲-e?RAtA±電.電A旳口■if^EU'L^/yniprir~?a'hi^E'E-I□r2.□-no口-Aji曲?fc?eTH蟲(chóng)HH4?鼻A*tt￡牲-?Dyn-BHiKHMwark,0IICP,1?耳'日%FrMFTAjU^y\kAHg4i?riiliKuiiih1"nlisiwDhg1rteTMMutaIJ-P訕叩IpD濾IPA4[frv?StartIpjtiklrvuFIrtd0IbcicrvMlIPAddress*L92.EaS.22.SQ|l知IM諳J.200I['DjD.O.OLPra打■-'AuN!>lDKCP&2El+iemtlnrWwPWW.,|打0口0|,|?WPEk^pldEthdrndcAdeta^SL^D.J234.^DEOt1 ［匚曷心］■■-*■二住-■<--T-?EiIAh!10.設(shè)置完成之后如下圖:am山刖諷O-暨tttTJttn^i■■3啪■慮射X*ru*fMW,{MA,日》切ItX叩曲i4a.±2I匚?回■寧X[7_-二OI!?泗tb"里TH蟲(chóng)HR電免trttt巫牲-二刖唾広“豆￡呀?lAnJ-■AC0Hfi—ork,|tlH：P,IHK***rwrJH出Xm*UbCH-g4i?riillCP吟PUDynamicCWI兩UERcmiyja■if^EU'L^/yniprir~ra'hi^EE-IQrZ.PIFQdem3Si.lAfl.li.ifl-1?：.1EB_2：.^D.呦IIIH1C-onligufDhiHB此空般策略設(shè)置1.首先可以指定IP地址，根據(jù)IP地址作策略，選擇Policy-PolicyElements-Addresses-List，然后在中間頁(yè)面選擇Trust，然后點(diǎn)擊New，如下圖:i4a.±￡I與耳「--包?好電"N?|rT±Hn0鼻曲幷-二Unt:Ha吟LIchEpar[Hgft引tw-41四iE匚QEE5zl2zLMHfiEi35ElL!宣血空-List，然后在中間頁(yè)面選擇Trust，然后點(diǎn)擊New，如下圖:i4a.±￡I與耳「--包?好電"N?|rT±Hn0鼻曲幷-二Unt:Ha吟LIchEpar[Hgft引tw-41四iE匚QEE5zl2zLMHfiEi35ElL!宣血空Ptill界Rtpqrta1^1Eib呂■nrlfHfllllHEnliguTHHov□lahL^IF/DomffiniUnie^iEB.iEB.lB5_lB&y33Ccrrri^ni：D比屮VPNAdLtJPUKLwul&iii^Tta-itlJgi尋Eri?由譏2.在2.在AddressName為指定IP地址設(shè)置識(shí)別名稱，然后在下面輸入具體IP,如下圖:\f^uai^TLiI-bI:JujiLprc-3lLv-rirt^SC.J.Di2_D-TinJuvjIjiIcidc-CEepIt>ELI302i4a.±￡I甘斗匸二ilic~v? Ih.iiiHntkiA 鼻-_,r^-\f^uai^TLiI-bI:JujiLprc-3lLv-rirt^SC.J.Di2_D-TinJuvjIjiIcidc-CEepIt>ELI302i4a.±￡I甘斗匸二ilic~v? Ih.iiiHntkiA 鼻-_,r^-包?免育?t?dVriiKRd兮-班3lAnJ-Hg^-HTIlh—Khiiih1C-onliguTDhqnPdlZlfiALisnGraic!^g?4?Ol■削HPJi/PHbI■門(mén)If}Rc-pDrt31血m卩Ld^-A tlJgi.?gM?飢1.L■:?:匹g"■FP^iig■!肝3.設(shè)置之后如下圖::EpIUELI曲i4a.±2I?--KJtttTJM^i■■丫衣ML慮射工Aw./收柚AB?切Itx吃 -cFixRAtA±電.電A旳Ihl亂-0X4?- 曲?fc?￡TH蟲(chóng)cna立A*tt￡牲-—02■if^EU'L^/yniprir~ra'hi^EE-IQrZ.P4.再設(shè)置一個(gè)指定IP地址，如下圖:aiEFi^TLii-il3:JujiLprc-Sui-rrirDSC.J.Di2_D-TinJuvjs:EpIUELI屈i4a.±￡I◎匚-uJtttTJM^i■■丫衣ML慮射工Aw*收柚才.B?切Itx吃 -c?RAiLA±電.電A旳Ihl亂02■if^EU'L^/yniprir~?a'hi^E'E-IQrZ.P-0X4?- 曲?fc?uTH蟲(chóng)cna立A*tt￡金-inipefriH?rHiiiiih1Hiiiiih1CDnligwDh^IriiiinmDPAddrHX/DtHniMnPtam-cftddrM-3Name[rwCarV^rtMHt(3IPAdcki日寸Mttmwh^lAiUcardmas-k；一Graic?OOunid""!N/IIII^ZHItfrw*OKI匚anc?ITip□HM|iTip□HM|i■Lq^arl妙E□niiiMtoEEiRc-parts0Ehl*取!■TLi1TLi1a3:JujiLprE-Suimrf^SC.J.Di2_D-TinJuv^IjiIcik-CEepIueli 1111設(shè)置之后兩個(gè)都可以顯示出來(lái)，如下圖:uieLylil-kL:JujiLprE-Sui-rrirDSC.J.Di2_D-TinJuv^IjiIcik-CEepI-ueli/yniprir~ra'hi^EE-IQrZ.P-J*主-E.?盤(pán)frtt?nTH蟲(chóng)HRa鼻A*tt￡金-/yniprir~ra'hi^EE-IQrZ.PxsgS-i-inal|53JuriipcT*|53JuriipcT*Htw-4LLfizSiE￡D.EE也竝旦也QEfl5EIQ址迎ZKhiiihC-pnligwDb^n1C-pnligwDb^nlESI以II界T卜即護(hù)1^wLpipy^BNrrwfiHLpiEiemmlB11Rc-pnrtiI□H^l|iLq^nriCR/CkimalriComnimECoMI■皿ftflX.O.J/OWl4d#「口|汕"HPN^1EE.1E5.255.255/32Oal-UpmhMdr(rw>L?.L6S.3J.Lfc；3^iditjRcm&ygaF?<n盤(pán) A4Edit魯Eeki.6.設(shè)置多個(gè)指定IP組，選擇Policy-PolicyElements-Addresses-Groups，如下圖:中間頁(yè)面的Zone選擇Trust，點(diǎn)擊右側(cè)的New。iduv^IjiI\f^uxeLiduv^IjiItttUM?i 衣fll主lAFLi皆貼WTrfMiAllnuitx?■if^EU'L^/yniprir~?a'hi^E'E-IQrZ.P

-J■主-邑ETH蟲(chóng)HHa宦金-^JunfpefC.EtTwntF>iili^,衛(wèi)^>1^￥ A A廿EiiHH-p4HriillUnitrurtiClcfail:t|-b>j1lT|-Tnmm-(ftrtrurtTl-DllUaafitryjuadabtaI-HtllllHlC-pnligwDb4n曲J-PullerLMGfni^E?ITiW爲(wèi)IS,li魯gM?飢1.7.為此IP組起識(shí)別名稱，下面將需要加入組的IP添加到組里,點(diǎn)0K,如下圖:曲i4a.±2IKL-m-Jifc(tz TAnJ-PiiIhtv, if弋EHn^ha A廿kmim,d,'im^if]iiirrt|lo*H-g4i?riihU-rHfllllHQCionligurDbcqUrTMUwrii□Rc-parti尸LIJH>l|i?Lq^vIOHjpNarvikIITComment<—OfDUpiMbd-CJ—><—JjdLlBtaltBnXya*—>rifl 十《?1.■■DftIIcebTI住』*二二gi?? ""]:頭上百號(hào)&根據(jù)需求可以自定義服務(wù)，選擇Policy-PolicyElements-Services-Customs，如下圖：點(diǎn)擊右側(cè)NewIttTJ?■⑥tl^E 工>2皆即.g* ”gniJfrX叩 -e?RJttA±上電A 電 -豈■Mhbfc?邑蟲(chóng)HHE鼻ft*tt畐yiif^EbTL^ikoi"r-A"BE*frI□r2.P 牡-tz碎-理4TAnJ-Ti-gfivriihHkhhiiiiHKC^ligurDbcQPBhApwjwrti「fP吋III-Ma?iuvtPillig, ibvTiHnPuAJwge*AIESJunipefTr^n^fTOrtPTTtwriAndPar^rnttw-hb5葉ju^abtaTkr'wrrttmir*門(mén)CwiPqureJCtiiom-haflPC-TmIilMBai0星川曲*譏BE9.輸入此自定義服務(wù)的識(shí)別名稱，然后下面可以選擇服務(wù)類(lèi)型和服務(wù)端口，如下圖:h.'Eyu■丄■!=J^lace-51：LTFirPS—■J.Dj.J'.P-TbhiJu-』3ti*eim^◎匚-區(qū)tttTJWl?i 衣ML慮射X*ru畀齣W*MABn切frx叩■if^EU'L^/yniprir~ra'hi^EE-IQrZ.P-出*主-I!?泗tb"4.Tri±HA牲-Miili^乎 (Ivm-Hiifch.A蟲(chóng)v~v歸e,A *>liHilTI-gfHrilhSdrutcQlunHCTG-JmamatH^ihC-onligurabM-riwiBti9MiryPiill界PEftlK5wweTim?i0UnpnnDCOl肚記WtOMe呻QCu^tnm■31 OlO躲皿*晉Eni*飢I.■■命■wi?mXii*,*― myi-UBflPC—Graus-TnrfhS^vffl—iWfWTCTPVWs11■Ko.' Ir-BPsrw*!proIrncrH1'Nnim屮PrarP ' iruilMinPfirliCmP IHfwIM^li「!,iiw.Plijii葉二■11 i — "j3 □昭耐<3 c：IJQOCICMP□?[hPi 10 |[t￡EaE[{Q |Qg]1富 ^0R&nAOKAOljQPCKMPO血5葉| |II 1 11 111-I|0炯II”匚KPCijTM*CKmPC<ii.liHi-'t 1li 1—i+'s ?：：T<pOu&kCKMM□eI*i?L III y H 11二1 0ngneQItP<UOPOKmpC><lthrf￡ |llIItf11C0rwncOICPOUDPOKHM「1冊(cè)詞 |lleI1 1?SnoneOTCPOUOPOKHP<..icthcr| |-1SIflnoneOICPOUDPOKMP門(mén)ctherj |11—|1Cancel10.設(shè)置完之后如下圖:|尸 yli111:JujiLprE-SlLCTirDSC.J.Di2_D-TinJuvjInlcik-CEepIuelin'豈IIV-3.主-I! 4.Tri±HAe.立**tt曲牲-nameIr-apspen.tTCKXWb町a(chǎn)■■■■LCIVChmiPI上V，《LJCTC-lnbafTiatTCPac.pert.D-6E53S,dstpert.D-?aRjmag?ill冷V乎 tlfVTwnfch.A蟲(chóng)w歸ATI-gfHrilh0^■if^EU'L^/yniprir~?a'hi^E'E-IQrZ.PH^iihC-onliaurDbiH1￡ditISJuniper'II^MwnfwnifcarLHJGra.幣巧??掛■■夕■witlJgi.晉Eni*機(jī)!■|z** 7i:i_i_j.:JujiLpc-E-Suxv-rirf^SC.J.Dx2_D |z** 7i:i_i_j.:JujiLpc-E-Suxv-rirf^SC.J.Dx2_D r^ifx|z** 7i:i_i_j.:JujiLpc-E-Suxv-rirf^SC.J.Dx2_D |z** 7i:i_i_j.:JujiLpc-E-Suxv-rirf^SC.J.Dx2_D r^ifx11.定制多個(gè)服務(wù)組，選擇Policy-PolicyElements-Services-Groups,點(diǎn)擊頁(yè)面中間11.定制多個(gè)服務(wù)組，選擇右側(cè)的New，如下圖:■時(shí)■??]忙ifta.aI■ 「 —XttTJttfl^i■■丫衣ML慮射工Aw畀齣W詁MAdQ 4￡2Qj■if^EU'L^/yniprir~?a'hi^E'E-IQrZ.P￡2Ti-gfivriih—HfllllHJC?nligwDb<in矽Riry-GrantsmayWMjpnameAPPLE-KHAlMCCPMS-AOM5-EStJCKfiNCeMS-][SWIF■Cwnm^nlAOuAPPLE-KHAT-EfiAlNAP.DhB「..gpbHl-iatSOTvEAEcrojpMKF-C^.MCjb-WMS--E\Oiar?E-[?fiT4Bi5E.■.MB-[ia-COKMM】[S~[NUP4「...H.3Z3,MgCP.IZA,MGCP-U*.SCCP,MrdmS-aImp-SYControlFrotocc^r-kcr?<rtActMDractoey

hicrcMiftEschmgeHcraurtIQ*5s4f旳IPScrropGgpJWNaJnftficr-—■Sp-fi^-fcSflPC—Grains-去問(wèn)律TriFif'twihn-{j^tup凸阿Rai)-BP魯Eri?■譏 0K0K。12.為此定制服務(wù)組設(shè)置識(shí)別名稱，將需要的服務(wù)添加進(jìn)入，點(diǎn)擊\f*' 7i:i_l=al:JujiLprc-Suxcrirf^SC.J.Dx2_DITilUiivc-EEep-I-ueLI匸閣反修二.時(shí)-]忙Ifta,aI 「 —tttUM?i 電ItA.)工>2*fl^W??y,■好?fc???y,■好?fc?eTri±HHE.量■if^EU'L^/yniprir~?a'hi^E'E-IQrZ.PTi-gfivriihI-HfllllHlC*nligurDb4<]/F^iinr|_P—-LM-GmvamayC*nligurDb4<]-kSHPC-GniUHtiHHjpNarvik|cT-C-AfPComment<—OfDUpiMbd-CJ—>|^7W-【rrtflnwtFTPD忙 1(C?KMl[MUTELU.WFWTHTTF-EITHTTPiTCHPA込■MMukKIP-AMTKIPD?1(rnL4Khdt]ld-KWFri^wrrt出中左dTCHPPrtfHntItfjr^nhly“13.設(shè)置完成之后如下圖:「uiE^TLi1-ib.i:JunLpcE-Sui-rrirf^SC.J.Di2..D-TinJuvjLnllik-IUELI-_iX4?- nTriiHR0jfcA*R￡卷-Ice,ALLH-g4HriihIJiilirv，K^mnnE^GrauK0^■if^EU'L^/yniprir~ra'hi^EE-IQrZ.P葉^inedC^IOrtTi,HuiiihIC'PnligufDbbxiJ?5^Kbirv-Pflilh-MSRPE_Era奢■屮Gmj口Nflme■frmteraCcmri<?irCoMlju存APPLE-KHAT |AOL.APPLE-ICHA7-SNA1MAP.WtS,_.AppidCturtSfirvicxCroLpCP>af>PCTC-mtCEEYDNS.ftf.htf￡1E 険b處MGCP 1MtOCA,MGiZP-UAM?kkCatdwaMControlProtocolM5-4C*M5-il?-BP_MS-flD-DPSLWJ,..Prrwo^tActiveDirectory陽(yáng)壬曰匸HAMOE 1MBEKChAWGE-nAIMASe,...HcrofcrtEKCtian^ftMS町rems-LIS-CDM.MS-JtS-IMiPA,..MicroH>[tl]5ServerVCi[P 1K並丑H匚CP-CA,MCCP-lASCCR.VOaPBwicdSh_p魯：hl*機(jī)!■ r^.---:J刪「L.n.'■. ■:工■存ii^-Eia-id.Jgi■-14.策略設(shè)置，此處可以直接使用之前設(shè)置的指定IP地址（組）自定義服務(wù)（組）選擇Policy-Polices，如下圖：選擇FromUntrusttoTrust（可根據(jù)需要修改），點(diǎn)擊右側(cè)New,id"』Lnl苗二-HtttUM^i 收ItAr工>2.MA=ElnuiTX吃0^■if^EU'L^/yniprir~?a'hi^E'E-IQrZ.P-厶"-n“IJCBH今-Miilirv，(卜rumAllfiinr^gZlL財(cái)-JIfc訕”mulAlD-巡”H-g4HrllhESJunipefLict-20 7pbi-pag?FromU1iKur*ToAILi^nix￥I関I[SaarchjFromTrustTb5E_nLtotalpdic^-15hkiiiiHIC'PnligufDbbxi-Pdl界[PdiZIKLMAhRdk=tmIEif*TWTl5j-b旳卜Gfnicn'-5:mmiv5w^w*一Phri?*Tftsd-竝-n飛MSRPC—EraUK-広刖曲ITrafr^-SbififigD"tlna41ofiAcUmiCMngtjraFrublftMi>v?AnyANYEditftoHE Rgmq低d■*'*■1i矽攀fl*魯Eni*機(jī)I.Ejirt!15.如也可以設(shè)置FromTrusttoUntrust，如下圖:TLI1曲i4a.±2IJtttTJttfl^i■■丫衣ML慮射工Aw*rUW廚曲決4QSRiJfrX4-C?RAtA±電電A旳車(chē)金-刖&國(guó)?lAnJ-FromTrustTbLhEfl?totalpdictf-1DHtlnaOc*QHingmaEnAblfto1AnyTi-D^Hriih[DSouKftLhkiiiiH孚C^nligiKHbon匚>? RflPiq低Opt^TJ-HuLlVJ-TtoiE?l-lbrrt?rPIl?1-D1ZF>iili^,IJnJkJyt卜rnm.11<iin^gAll*■if^EU'L^/yniprir~ra'hi^EE-IQrZ.P^R^i^ndPdHPcAlK-MCwiTtetea■LM—Gratpa"—BVTTTTni^m：_9?kRH；-MSRPC■—Era轉(zhuǎn)丄3CM4IMGnbfi音世血LHjOP TH鑼Eni?飢I.TH16.策略設(shè)置頁(yè)面如下圖，設(shè)置名稱，選擇源地址和目的地址，服務(wù)類(lèi)型等，最后選擇允許還是拒絕。屈i4a.±￡I-C?RI±A±電.電A 車(chē)tttUM?i 收ItAr工>2-C?RI±A±電.電A 車(chē)金-刖b垃"旦空呀TlAnJ-匚S^wrtT鼻TXw*IMui甲flITI-Q^Hrill金-刖b垃"旦空呀TlAnJ-匚S^wrtT鼻TXw*IMui甲flITI-Q^Hrill■if^EU'L^/yniprir~?a'hi^E'E-IQrZ.PFiiili^,IJnJkJp(I-rnmlnj)lTol^IvvUlQhlAH-AddAU0Addi-AEL；Ba^UcEntryHONah-Ariii(tM.IO^ririrA^hfiitkEntiy,止y^rviiHLtfeiGn]?Apfillcalhin|Mww vActPbnTunnol-SW1K5C-MSRPC■—Gra#卜3ChM?ti-UHfam-dia<iEjpBiH^□5pLtfeiGn]?Apfillcalhin|Mww vActPbnTunnol-SW1K5C-MSRPC■—Gra#卜3ChM?ti-UHfam-dia<iEjpBiH^□5pJ-WMs3吟氏 F ￡1^90riir^iii^iPor肌+岸iflnuDir^■R6]An.IlientL121FBrffyEjldinob+drKbnn^VPTfpokiLiTTflinvPodHonAtTop口占”》lonlimit口ac沁BbgrvM-igQ□鑼Eni?飢!■17.設(shè)置之后如下圖:TLI :JunL|^E-Suirrirf^SC.J.Di2_D-TinJuv^:EpIUELIon-暨XttTJttfl^i■■丫衣ML慮*工Aw-C-?RAtA±電.電A旳上■if^EU'L^/yniprir~ra'hi^EE-IQrZ.P-IJOE?泗tb"電TH蟲(chóng)HR載立A*tt￡令-^iili^, ri*reEIniklToTi-pfHriillLict20 7pbi-pag?From盼T *ToUntniBf￥I関I[SaarchjI|-呦IIIHTC-pnliguvDhbM17.設(shè)置之后如下圖:TLI :JunL|^E-Suirrirf^SC.J.Di2_D-TinJuv^:EpIUELIon-暨XttTJttfl^i■■丫衣ML慮*工Aw-C-?RAtA±電.電A旳上■if^EU'L^/yniprir~ra'hi^EE-IQrZ.P-IJOE?泗tb"電TH蟲(chóng)HR載立A*tt￡令-^iili^, ri*reEIniklToTi-pfHriillLict20 7pbi-pag?From盼T *ToUntniBf￥I関I[SaarchjI|-呦IIIHTC-pnliguvDhbMf-PnriOBBdLeotaNt*iryr-Rdl界p理K■L?HGrains-USRPC—Gfwa-SChtW'**CPrJWNafl ~、[DSObJI-CAEh*1,tianS^rvloa1MyfinvfiffYirrAllyCT匚"APPFromTrustTbLhEfl?totalpdictf-ZAchl<jih?IOpUMiFCoirilguH-￡介血1?Hcvft吐ClqpeRemove迪口fllU18.也可以設(shè)置一個(gè)全拒絕的策略，如下圖:uairi^TLi:JunL|^E-Suirrirf^SC.J.Di2_D-TinJuv^:EpIUELI匚叵區(qū)on-atzXttTJttfl^i■■丫衣ML慮*工AwM收柚HB卻■英 -t?RI±A±4.電A旳t■if^EU'L^/yniprir~?a'hi^E'E-IQrZ.P-IJOE?泗tb"電TH蟲(chóng)HR載立A*tt￡牲-匚Ti-pfHriillBJuntper^I^HIriiirwDaurII?C?ptlvnnl>[hkiiiiHC-pnIiguvDhtMriwHTrti$4?iryPiill界-PdEiKEtrnmlsBapGra啊卜Pnri^HiLcstn■■HKSC

HSHPC1&WS—SnipE>fMuu^nT>dpnlm曲rvkh>OHAh-AddAU.0Addi-AUhditkEncry山lyONah-ArillAMIO^ririiAMhfiitkfncryjAXrApfillcalhinK葉ACtPanTufind1^0rilr^iirtQP^rpit*一■'0HIMill甲flIw'lHulbpiT]r^JacT.l-TuintL審帀EjidingbidTKbrKi^VpnpofcyL21PBmy□ac54isK?nBbgrvu-rgQ□S?ElDnlliniitCHjnttf|o?!rtH*￡2Lrp“-葩39” ：F?ii^-Etrid.Jgi., Itt:■:応icg?mXii護(hù)|i“「碎319.設(shè)置之后如下圖:亍-uiE^TLi1f!:JunLpcE-SlL-rrir€SC.J.Di2_D-TinJuvj1■UELI曲i4a.±2I圧-KJtttTJttfl^i 衣ML慮射工Aw*fUW<MA￡Un切VX叩 -c?FWC±電.電A旳ihl口Q^■if^EU'L^/yniprir~ra'hi^EE-IQrZ.P-壬-電■?盤(pán)frtt?t^n±HA呂.立A*tt￡*-貝和E"MidlAnJ-FromTrustTbLhEfl?botjlpdictf-ZEh*1,tian加rvlsDptlMii-CoirilguH-EndbHcvftPiiIf，?用1口UrumIniU「?g存MlHgf-Hrlih[DScmJFUAchl<jihrsIHSiih1C-onli^DbM陸■-Rcllqj■'巳4kAHYrrAiVfCTt-JkPPI?J』辿□哄 嚴(yán)EQ侶EriU口flrwbS￡EIFl魯EnWXi.<iW?、20.可以點(diǎn)擊ID為1的策略右側(cè)的雙箭頭符號(hào)，出現(xiàn)腳本提示點(diǎn)確定,ExplucClffl廣?■總— E'■主■云1*t1■?hL耳評(píng)_|卄-S.4ftiK浮巾TI1+■?"時(shí)「*,lihRr-1Li jQiryL*Lmnd?■n^*ViK.W■>屮IJUIJIJ!.艸■TIM*I4WMhVU41LnM>Ijfcg.，*J.EW4Q4^t丁》-?J??嚴(yán)「.：??!..」廠J?>■>■：「丁訂；仃-主-電■?盤(pán)frtt?tTri±HA呂立A*tt￡受-□L^JunlpefDWUUri-nxnirusribSEjacH?rdipciicy-tEh*1,tian加rvlsDptlMii-CoirilguH-EndbHcvftHgf-Hrlih[DScmJFUAchl<jih1C-onlisnvDbM3M^ifub3(Viry-PhIIt* 'PdEIKJPDittytbrnmlsAHYrrAikfCTt-APPI ?J *辿□哄 嚴(yán)EQ侶￡eU口flfteLM「GfTlL^丨-B^nmaySvniHHL-9W-WM；jMSRPCLehi護(hù)一Mil如TivRt-Sh^HMl一uiiupOP1WPh男P^E 和5『ngIWl/gK：4MiT?TI?5WW7gpT^i47MH：Kn?VkliWK、:11^ 1^ ?Li!-￡=:JujiLpfE-SuiT-n^SC.J.D12.D-Tinduv^ :EPIUELI1^ 1^ ?Li!-￡=:JujiLpfE-SuiT-n^SC.J.D12.D-Tinduv^ :EPIUELITrust口至yUntrust口的21.這樣可以把ID為1的策略放到下面，如下圖策略含義為從流量中，來(lái)自IT組的IP地址到任意目的地，服務(wù)類(lèi)型屬于 CTG-APP中的流量允許通過(guò),其他所有流量都拒絕。-「丸fr電"^TirTiran也圭ft*tt曲兮SSiper*LHwiihkC?nligwDb：4wImo?*平PEBtlKIlMi^iRf4^4^^^^^r^l^rE^TTinTll卜陽(yáng)廠Gm.BjnrntflH5uwk->MAF*ri^Md卜Ccsm■跖-HSflPC—Bra昨HMUlAElonDptJHIi-CTG-iPPArvf鈕 口fl陽(yáng)■iiIe，VniKIn[hrum.Ini*I*。Wlvv*tAiZlIfilhCOIkllgLHf ? II o-Hj典壯■FfTiii和I22.可以為策略設(shè)置時(shí)間表，選擇Policy-Schedules,如下圖：點(diǎn)擊New1^uaiC-^'?Li1-ilZ:JujiLpfE-Suirrirt^SC.J.Di2_D-TinJuv^IjiIciek-[EepIueli:sei4a.鮭I02iif^EU-L^/Xnipdr-5-a-hi^E-IQrZ.P-」￥￡-4*初電&?t^n±=A0jtA*R￡兮-■+g4Hriili\f*'\f*'uieI^vli14J:JunLprc-SuL-rrii1^SC.J.Di2.D-TinJuvj :Epl-UELI □空El\f*'\f*'uieI^vli14J:JunLprc-SuL-rrii1^SC.J.Di2.D-TinJuvj :Epl-UELI □空El23.輸入時(shí)間表名稱worktime，設(shè)置周期時(shí)間。0^■if^EU'L^/yniprir~ra'hi^EE-IQrZ.P-己*工-E?泗tb"邑TH蟲(chóng)HHf?鼻A*tt￡牲0^■if^EU'L^/yniprir~ra'hi^EE-IQrZ.PH-p4HriihEBJunipcfI^^HfliinniiurKniiiH1CionliguTDbiHiNrHdukluriHA/uhtHTuCommcfil■_刊3Rdl界■■M*iP土啲■^mtfTlsfijHd'LM—Grains」KaiiiiLS^t-FVri^aeti-Ct￡i(n-MrHPE：-艦RPC_Bnii^-hafip4b>fi^-GWtap^Mxmm-HPj-JMiK6j'IKERr0Rd仙hvih中[hh!iwn]24.設(shè)置之后如下圖:uieFI-vliiia:JunLprc-SuL-rrii1^SC.J.Di2_D-TinJuvjQ--.-"―IttTJ *1心1也lllAWXHVtUKA.-：BSSUtX4:SCi4a.琵IEundffyIhVFid-J7Vuesd-jy|Wrtdn?*aYTs中rtnip<I[?:DP1

r^iPP[I；DO?；Q0ThursdayFridavEaCurd-jyStartDat=-andiWne壽Tap AndjjfiiA:Epl-UELI-cWRJbtAt電.電A旳口0^■if^EU'L^/yniprir~?a'hi^E'E-IQrZ.P:rimf1 PtriwlZ_:EndTin'flStartTimeEfi4Time11:0012:00n；ODDODOn；ODDOF