防火墙脚本 透明模式.doc

Eudomen 200E-B 未升级前采集 dis cur # sysname E200E-B # web-manager enable # firewall packet-filter default permit interzone local trust direction inbound firewall packet-filter default permit interzone local trust direction outbound # firewall permit sub-ip # dhcp enable # firewall statistic system enable # interface Express-3G5/0/0 link-protocol ppp # vlan 1 # interface Vlanif1 ip address dhcp select interface # interface Ethernet0/0/0 # interface Ethernet1/0/0 # interface Ethernet1/0/1 # interface Ethernet1/0/2 # interface Ethernet1/0/3 # interface Ethernet1/0/4 # interface Ethernet1/0/5 # interface Ethernet1/0/6 # interface Ethernet1/0/7 # interface Ethernet2/0/0 # interface NULL0 # irewall zone local set priority 100 # firewall zone trust set priority 85 add interface Vlanif1 # firewall zone untrust set priority 5 add interface Ethernet0/0/0 # firewall zone dmz set priority 50 # firewall interzone local trust # firewall interzone local untrust # firewall interzone local dmz # firewall interzone trust untrust # firewall interzone trust dmz # firewall interzone dmz untrust # aaa local-user admin password cipher ]MQ;4\]B+4Z,YWX*NZ55OA!! local-user admin level 3 local-user admin ftp-directory flash:/ authentication-scheme default # authorization-scheme default # accounting-scheme default # domain default # # slb # user-interface con 0 user-interface tty 81 authentication-mode none modem both user-interface vty 0 4 authentication-mode aaa # return <E200E-B>dis version（查看版本） Huawei Versatile Routing Platform Software Software Version : E200E-B V100R001C01SPC001 (VRP (R) Software, Version 3.30) Copyright (C) 2008-2009 Huawei Technologies Co., Ltd. Quidway E200E-B uptime is 0 week(s), 0 day(s), 0 hour(s), 3 minute(s) Rpu's version information: 256M bytes SDRAM 16M bytes FLASH Pcb Version : VER.B CPLD logic Version : 005 Small BootROM Version : 108 Big BootROM Version : 116 Slot2: 1FE (pcb)VER.A(software)000 (logic)000 (boa