华为USG限速与限P2P.docVIP

华为USG限速与限P2P sysname USG3000#firewall dpi packet-number 5? ?? ?? ?? ???// 配置最多检测P2P 报文个数为5 个。firewall p2p-car default-permit? ?? ?? ?? ?启用全局P2P 限流功能#firewall p2p-car include Thunder? ?? ?? ?? ?配置需要进行P2P 检测、限流的协议 这里是迅雷#firewall car-class 1 1200000? ?? ?? ?? ? # 配置带宽限制等级及对应的带宽上限值。? ? 1200000 这数值测试为120K左右 手册上不同#FTP server enable? ?? ?? ?? ?? ?? ?? ?? ?? ? 开启FTP 为服务端#web-manager enable? ?? ?? ?? ?? ?? ?? ?? ???开启WEB管理#firewall packet-filter default permit interzone local trust direction inboundfirewall packet-filter default permit interzone local trust direction outboundfirewall packet-filter default permit interzone local untrust direction inboundfirewall packet-filter default permit interzone local untrust direction outboundfirewall packet-filter default permit interzone local dmz direction inboundfirewall packet-filter default permit interzone local dmz direction outboundfirewall packet-filter default permit interzone trust untrust direction inboundfirewall packet-filter default permit interzone trust untrust direction outboundfirewall packet-filter default permit interzone trust dmz direction inboundfirewall packet-filter default permit interzone trust dmz direction outboundfirewall packet-filter default permit interzone dmz untrust direction inboundfirewall packet-filter default permit interzone dmz untrust direction outbound#undo nat alg enable espnat alg enable ftpnat alg enable dnsnat alg enable icmpnat alg enable netbiosundo nat alg enable h323undo nat alg enable hwccundo nat alg enable ilsundo nat alg enable pptpundo nat alg enable qqundo nat alg enable msnundo nat alg enable user-defineundo nat alg enable sipundo nat alg enable mgcpundo nat alg enable mmsundo nat alg enable sqlnetundo nat alg enable rtspfirewall permit sub-ip#firewall mode transparent? ?? ?? ?? ?? ?? ?? ?? ?? ?? ???USG为透明模式firewall system-ip 51 ? ?? ?? ?? ? USG系统地址#firewall statistic system enable #interface GigabitEthernet0/0description waiw