网络调试模拟题答案.docxVIP

模拟试题参考答案 2010四川省高职计算机网络组建与安全维护技能大赛 Version 2.0 aaa-server MlocalH type local exit user Hdengn aaa-server nlocalH password p+iP5g8Uq+Sv8ibg8/K87yxbb4A I exit admin user HadminH password FeU+daOcUEBKbhdAOsPazBjAwC privilege RXW access console access telnet access ssh access http access https exit hostname FW1 admin host any telnet admin host any ssh admin host any http admin host any https ip vrouter trust-vr exit vswitch uvswitchlM exit zone MtrustH exit zone Huntrustn ad tear-drop ad ip-spoofing ad land-attack ad ip-option ad ip-option action alarm ad ip-fragment ad winnuke ad port-scan ad syn-flood ad icmp-flood ad ip-sweep ad ping-of-death ad udp-flood ad ip-directed-broadcast exit zone Hdmzu exit zone 12-trust 12 exit zone 12-untrust 12 exit zone H12-dmzH 12 exit zone “VPNHub exit zone “HA“ exit zone nvpn-sH exit interface vswitchifl exit interface ethernetO/O exit interface ethernetO/1 exit interface ethernetO/2 exit interface ethemetO/3 exit interface ethernetO/4 exit interface tunnel 1 exit pki trust-domain Htrust_domain_defaultn keypair nDefault-Keyn enrollment self subject commonName DCFW-1800 subject organization HDigitalChina Networks Limitedn exit scvpn pool nvpn-poor, address 0 0 netmask dns 10.10.9 exit tunnel scvpn HdengH pool nvpn-poolH anti-replay 32 allow-multi-logon interface ethemetO/1 split-tunnel-route /30 metric 35 split-tunnel-route 192.16 10.0/24 metric 35 split-tunnel-route /24 metric 35 split-tunnel-route /24 metric 35 split-tunnel-route /24 metric 35 aaa-server HlocalH exit in terface ether netO/O zone n trust11 ip address 52 man age ssh manage telnet man age ping man age snmp manage http man age https exit interface ethemetO/1 zone Huntrustn ip address 2189.142.1 52 man age http manage ping manage https exit interface tunnell zone uvpn-sn ip address tunnel scvpn MdengH manage ssh man age ping manage hups exit ip vrouter trust-vr ip route /0 ip route /17 exit policy from Hvpn-sH to trust” rule id 2 action permit src-addr MAnyu dst-a