Files
StudyDiary-20251025/03-学习笔记/网络交换机/华为H3C防火墙配置命令.doc
T

21 lines
35 KiB
Plaintext
Raw Normal View History

2025-09-27 11:06:18 +08:00
ÐÏࡱá>þÿ ACþÿÿÿ@ÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿì¥Áq` ðR¿r:bjbjqPqP2>::9ÿÿÿÿÿÿ¤JJJJJJJ^&&&&: ^ÿ @Rp  $?
h§6D uJÂÂÂÂÂD JJ¹ ° ° ° ˆJÂJ °  ° ° JJ° ÂF 0`B*i�Ë&J .°  Ï 0ÿ ° Ýx ݰ ° FÝJö
(° ÂÂÂÂÂD D Ž "ÂÂÂÿ ÂÂÂÂ^^^äBä^^^B^^^JJJJJJÿÿÿÿ NS:NH3C2–kp™XM‘n}TäN
H3CF100SM‘n
172.18.100.1 255.255.255.0 255.255.255.0 RËYSM‘n 0H3C 0system-view _/T2–kp™XŸRý€ [H3C]firewall packet-filter enable [H3C]firewall packet-filter default permit RM‘ïzãS:SßW [H3C] firewall zone untrust [H3C-zone-trust] add interface GigabitEthernet0/0 [H3C] firewall zone trust [H3C-zone-trust] add interface GigabitEthernet0/1 å]\O!j_ firewall mode transparent �f O“� firewall mode route ï�1u!j_ http
g¡RhV Oý€HTTP
g¡RhV undo ip http shutdown sQí•HTTP
g¡RhV ip http shutdown ûm RWEB(u7b [H3C] local-user admin [H3C-luser-admin] password simple admin [H3C-luser-admin] service-type telnet [H3C-luser-admin] level 3 _/T2–ƒŸRý€ firewall defend all Sb_@b g2–ƒ Rbc:N-N‡e!j_ language-mode chinese ¾‹n2–kp™X„v
Tðy sysname sysname M‘n2–kp™Xû|ß~IP 0W@W firewall system-ip system-ip-address [ address-mask ] ¾‹nhÆQöeô• clock datetime time date ¾‹n@b(W„vöe:S clock timezone time-zone-name { add | minus } time ÖSˆmöe:S¾‹n undo clock timezone M‘nRbc(u7b§~+R„vãSäN super password [ level user-level ] { simple | cipher } password ÖSˆmM‘n„vãSäN undo super password [ level user-level ] ::wÅ`µQ N ÿå‚
Ncš[§~+R ÿR¾‹n„v:NRbc0R3 §~„vÆ[x0 Rbc(u7b§~+R super [ level ] ôv¥cÍ‘°e/T¨R2–kp™X reboot _/TáOo`-NÃ_ info-center enable sQí•áOo`-NÃ_ undo info-center enable ftp server enable >f:y N!k/T¨Röe R}�„vM‘n‡eöN display saved-configuration [ by-linenum ] >f:yû|ß~,g!k/T¨RÊS N!k/T¨RO(u „vM‘n‡eöN display startup >f:yS_MRƉþV„vM‘n display this >f:y2–kp™X„vS_MR„vÐ�LˆM‘n display current-configuration[ interface interface-type [ interface-number ] | configuration [ isp | zone | interzone | radius-template | system | user-interface ] ] [ by-linenum ] [ | { begin | include | exclude } string ] ÝOX[S_MRM‘n save [ file-name | safely ] Rd–Flash -NÝOX[„v
N/T¨ROmȉhVÿú^®‹O(uIE5.0ÊSåN
NHr,g ÿ ÿ(W0W@Wh-N“�eQIP0W@W 192.168.0.1 TÞVf� ÿsSïSÛ�eQ2–kp™XWeb{vU_u˜b— ÿO(uKNMRRú^„v admin^7b{vU_2–kp™X ÿUSûQ<Login> c®”sSïS{vU_0(u7bïSåN�Ç� Language NÉbFh �ébLub—틊
 
 
…Qè�;N:g�Ç�ßW
T:SRv^¿‹î•ù[”^„v…Qè�
g¡RhVÄ~Q”^(u 1)M‘neasy ipÿ
N(uM‘0W@W`l ÿôv¥c�Ç�¥cãS0W@WZPl�bc ÿ nat outbound acl-number
2)DNS MAP nat dns-map domain-name global-addr global-port [ tcp | udp ]
ž[‹Oÿ
# (WEthernet0/0/0 ¥cãS