华为Eudemon防火墙配置命令(国外英语资料).docVIP

华为Eudemon防火墙配置命令(国外英语资料) The standard access list configuration command format Acl acl - number [match - order config | auto] Rule {normal | special} {permit | deny} [source sour-addr sour-wildcard | any] (1) configure the extended access list for the TCP/UDP protocol: Rule {normal | special} {permit | deny} {TCP | udp} [source source - addr source - wildcard | any] [source - the port operator port1 [port2]] [destination dest - addr dest - wildcard | any] [destination - port operator port1 [port2]] [logging] (2) the expanded access list for configuring the ICMP protocol: Rule {normal | special} {permit | deny} icmp [source source - addr source - wildcard | any] [destination dest - addr dest - wildcard | any] [icmp -type icmp -type icmp p-code] [logging] (3) extend access lists for other protocols: Rule {normal | special} {permit | deny}} {IP | ospf igmp | | gre [source source - addr source - wildcard | any] [destination dest - addr dest - wildcard | any] [logging] The operator operator has: Equal portnumber (= portnumber) Greater than portnumber ( = portnumber) Less than portnumber ( = portnumber) Not equal portnumber ( portnumber) Range portnumber1 portnumber2 (portnumber1 and portnumber2) Example: create a list of access controls numbering 102. [Eudemon] acl number 102 # configure the ACL rule to allow specific users to access the internal server from the external network. Rule permit TCP source 0 destination 0 Rule permit TCP source 0 destination 0 Rule permit TCP source 0 destination The above configuration has completed the creation of the ACL. The following configuration is a reference to the ACL in the packet filtering application, and the details of the relevant commands are described in the relevant section. # # will apply ACL rule 101 to the area between the Trust area and the Untrust area. [Eudemon - interzon-trust-untrust] packet - filter 101 # 1: the ACL rule 102 ACTS in the direction of the trust zone between the unTrust area and the unTrust a