配置防火墙混合模式(典型配置案例).docVIP

如何配置防火墙混合工作模式 案例一： ＋＋＋＋＋＋＋＋＋＋＋＋＋＋＋＋＋＋＋＋＋＋＋＋＋＋＋＋＋＋＋＋＋＋＋＋＋＋＋＋ 注：缺省访问权限都允许的情况下，完成如下的配置即可 具体的访问控制配置过程参考访问控制操作篇 此环境中由路由器完成NAT（源地址转换）功能以实现共享上网 ＋＋＋＋＋＋＋＋＋＋＋＋＋＋＋＋＋＋＋＋＋＋＋＋＋＋＋＋＋＋＋＋＋＋＋＋＋＋＋＋ 〖配置相应网口的工作模式以及IP地址〗 TopsecOS# network interface eth0 no switchport TopsecOS# network interface eth0 ip add 192.168.7.165 mask 255.255.255.0 TopsecOS# network interface eth0 no shutdown TopsecOS# network interface eth1 switchport TopsecOS# network interface eth1 switchport mode access TopsecOS# network interface eth1 switchport access-vlan 1 TopsecOS# network interface eth1 no shutdown TopsecOS# network interface eth2 switchport TopsecOS# network interface eth2 switchport mode access TopsecOS# network interface eth2 switchport access-vlan 1 TopsecOS# network interface eth2 no shutdown TopsecOS# network vlan add id 1 TopsecOS# network interface vlan.1 ip add 10.1.1.1 mask 255.255.255.0 TopsecOS# network interface vlan.1 no shutdown 〖配置缺省路由〗 TopsecOS# network route add dst 0.0.0.0/0 gw 192.168.7.1 〖简单的配置各个网口区域的缺省策略后即可正常通讯〗 TopsecOS# define area add name area_eth0 attribute eth0 access on TopsecOS# define area add name area_eth1 attribute eth1 access on TopsecOS# define area add name area_eth2 attribute eth2 access on ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ 案例二： ＋＋＋＋＋＋＋＋＋＋＋＋＋＋＋＋＋＋＋＋＋＋＋＋＋＋＋＋＋＋＋＋＋＋＋＋ 注：缺省访问权限都允许的情况下，完成如下的配置即可 具体的访问控制配置过程参考访问控制操作篇 ＋＋＋＋＋＋＋＋＋＋＋＋＋＋＋＋＋＋＋＋＋＋＋＋＋＋＋＋＋＋＋＋＋＋＋＋ 〖配置相应网口的工作模式以及IP地址〗 TopsecOS# network interface eth0 no switchport TopsecOS# network interface eth0 ip add 192.168.7.165 mask 255.255.255.0 TopsecOS# network interface eth0 no shutdown TopsecOS# network interface eth1 switchport TopsecOS# network interface eth1 switchport mode Trunk TopsecOS# network interface eth1 switchport trunk encapsulation dot1q TopsecOS# network interface eth1 switchport trunk native-vlan 1 TopsecOS# network interface eth1 switchport access-vlan 10 TopsecOS# network interface eth1 switchport