51CTO下载-100F防火墙配置.docVIP

刚刚调试的一台100F防火墙，，满足学校的需求 满足的要求。网段1教室 （）只能访问35 22 33这几个地址其他都不能访问。qq也不能上? ?? ?? ?? ?网段2直播 （）和网段1的要求一样? ?? ?? ?? ?网段3机房可以任意访问（）? ?? ?? ?? ?网段4家属区可以任意访问（）? ?? ?? ?? ?内部服务器对外提供web和ftp服务。? ?? ?? ?? ?学校2条线路 一条电信 一条广电互为备份，，电信的优先。当电信断了自动切换到广电**********************************************************? ?? ?? ? All rights reserved (1998-2006)? ?? ?? ?? ???**? ?? ?Without the owners prior written consent,? ?? ? **no decompiling or reverse-engineering shall be allowed.**********************************************************Login authentication? ?Password:Quidwaydis cu#sysname Quidway#firewall packet-filter enablefirewall packet-filter default permit#insulate#nat dns-map 33 80 tcp#firewall statistic system enable#dns server dns server 8dns server 8dns server 9dns-proxy??enable#radius scheme system#domain system#dhcp server ip-pool 1network mask gateway-list dns-list #dhcp server ip-pool 2network mask gateway-list dns-list #dhcp server ip-pool 3network mask gateway-list dns-list #dhcp server ip-pool 4network mask gateway-list dns-list #acl number 2000rule 0 permit source 55rule 1 permit source 55rule 2 permit source 55rule 3 permit source 55rule 4 deny#acl number 3000rule 0 permit ip destination 35 0rule 1 permit ip destination 22 0rule 2 permit ip destination 55rule 3 permit ip destination 55rule 4 permit ip destination 55rule 5 permit ip destination 55rule 6 permit ip destination 0rule 7 permit ip destination 0rule 8 permit ip destination 33 0rule 9 permit ip destination 55 0rule 10 deny ip#interface Aux0async mode flow#interface Ethernet0/0ip address firewall packet-filter 3000 inbound#interface Ethernet0/1ip address firewall packet-filter 3000 inbound#interface Ethernet0/2ip address #interface Ethernet0/3ip address #interface Ethernet1/0ip address 73 24nat outbound 2000#interface Ethernet1/1ip address 33 28nat outbound 2000nat server protocol tcp global