华为usg2210防火墙配置实例.docVIP

USG2200display current-configuration detect h323 d 09:29:14 2016/03/17 detect qq # sysname USG2200 detect #s l2tp enabledetect netbi undo l2tp domain suffix-separator @ undo tunnel authentic #i ike dpd interval 10 allow l2tp #i firewall packet-filter default permit interzone local trust direction inbound unicast undo synchronization # firewall packet-filter default permit interzone local trust direction outbound local-user user2 firewall packet-filter default permit interzone local untrust direction inbound local-user user3 password cipher %$%$`;WkNM${E;O=5--=%y firewall packet-filter default permit interzone local untrust direction outboundal-user user3 service-type ppp local-user use authentication-mode vpndb # nat server 1 protocol udp global 218.56.104.*** any inside 3 anyheme test.scm authorization-mode vpndb # ip df-unreachables enableaccounting-scheme default # firewall ipv6 session link-state checkfault domain dot1x firewall ipv6 statistic system enable authentication-scheme test.sc # dns resolve firewall defend syn-flood enable firewall defend arp-flood enable firewall defend sip-flood enable firewall defend udp-flood fingerprint-hit destination-max-rate 5 firewall defend udp-flood fingerprint-hit source-max-rate 3 firewall defend sip-flood port range 1 65535 # firewall statistic system enable # pki certificate access-control-policy default permit # dns proxy enable # license-server domain # web-manager enable web-manager security enable port 8443 # user-manage web-authentication security port 8888 # # radius-server template test.tpl # # ldap-server template test.tpl