icg2000配置和解释

# version 5.20, Test 1705# sysname yichang-wangba# tcp syn-cookie enable tcp anti-naptha enable tcp state closing connection-number 500 tcp state established connection-number 500 tcp state fin-wait-1 connection-number 500 tcp state fin-wait-2 connection-number 500 tcp state last-ack connection-number 500 tcp state syn-received connection-number 500# ipsec cpu-backup enable# firewall enable# nat aging-time tcp 300 nat aging-time udp 180 nat aging-time pptp 300 nat aging-time ftp-ctrl 300# domain default enable system# telnet server enable# qos carl 1 source-ip-address range to 2 per-address qos carl 2 destination-ip-address range to 2 per-address qos carl 3 source-ip-address range 4 to 20 per-address qos carl 4 destination-ip-address range 4 to 20 per-address# mirroring-group 1 local#acl number 2000 rule 5 permit source 55 rule 10 deny#acl number 3100 rule 10 deny tcp destination-port eq 445 rule 11 deny udp destination-port eq 445 rule 20 deny tcp destination-port eq 135 rule 21 deny udp destination-port eq 135 rule 30 deny tcp destination-port eq 137 rule 31 deny udp destination-port eq netbios-ns rule 40 deny tcp destination-port eq 138 rule 41 deny udp destination-port eq netbios-dgm rule 50 deny tcp destination-port eq 139 rule 51 deny udp destination-port eq netbios-ssn rule 61 deny udp destination-port eq tftp rule 70 deny tcp destination-port eq 593 rule 80 deny tcp destination-port eq 4444 rule 90 deny tcp destination-port eq 707 rule 100 deny tcp destination-port eq 1433 rule 101 deny udp destination-port eq 1433 rule 110 deny tcp destination-port eq 1434 rule 111 deny udp destination-port eq 1434 rule 120 deny tcp destination-port eq 5554 rule 130 deny tcp destination-port eq 9996 rule 141 deny udp source-port eq bootps rule 160 permit icmp icmp-type echo rule 161 permit icmp icmp-type echo-reply rule 162 permit icmp icmp-type ttl-exceeded rule 165 deny icmp rule 200 deny tcp destination-port eq www rule 202 deny tcp destination-port eq ftp rule 203 deny tcp destination-port eq 22 rule 204 permit tcp destination-port eq telnet rule 2001 permit ip destination 55 rule 2002 deny ip#vlan 1#domain system access-limit disable state active idle-cut disable self-service-url disable#user-group system#local-user admin password cipher Da4.B2FTUP61DKDQR.FQ! authorization-attribute level 3 service-type telnet#wlan rrm dot11b mandatory-rate 1 2 dot11b supported-rate 5.5 11 dot11g mandatory-rate 1 2 5.5 11 dot11g supported-rate 6 9 12 18 24 36 48 54#cwmp undo cwmp enable#interface Aux0 async mode flow link-protocol ppp#interface Ethernet0/0 port link-mode route firewall packet-filter 3100 inbound nat outbound 2000 nat server protocol tcp global 69 10086 inside 51 10086 nat server protocol tcp global 69 10087 inside 3 10087 nat server protocol tcp global 69 11469 inside 30 11469 nat server protocol tcp global 69 11470 inside 30 11470 ip address 69 24#interface NULL0#interface Vlan-interface1 ip address 54 qos car inbound carl 1 cir 2000 cbs 64000 ebs 0 green pass red discard qos car inbound carl 3 cir 2000 cbs 64000 ebs 0 green pass red discard qos car outbound carl 2 cir 3500 cbs 64000 ebs 0 green pass red discard qos car outbound carl 4 cir 3500 cbs 64000 ebs 0 green pass red discard#interface Ethernet0/1 port link-mode bridge mirroring-group 1 mirroring-port both#interface Ethernet0/2 port link-mode bridge#interface Ethernet0/3 port link-mode bridge#interface Ethernet0/4 port link-mode bridge mirroring-group 1 monitor-port#interface WLAN-Radio2/0 shutdown# ip route-static 61# arp anti-attack active-ack enable arp static 61 0030-8803-673e arp static 71 0019-2159-4361 1 Ethernet0/1 arp static 7 0019-db8c-68ef 1 Ethernet0/1 arp static 1 0019-db8c-5eaa 1 Ethernet0/1 arp static 0019-db8c-68e1 1 Ethernet0/1 arp static 03 00e0-4cc1-7756 1 Ethernet0/1 arp static 6 0019-db8c-5db2 1 Ethernet0/1 arp static 51 00f0-4c83-4cc2 1 Ethernet0/1 arp static 3 0019-db8c-6e06 1 Ethernet0/1 arp static 53 00f0-4c84-be2e 1 Ethernet0/1 arp static 0019-db83-3481 1 Ethernet0/1 arp static 0019-db8c-6931 1 Ethernet0/1 arp static 03 00f0-4c88-6ed6 1 Ethernet0/1 arp static 0019-db8c-6437 1 Ethernet0/1 arp static 05 0019-2159-a8db 1 Ethernet0/1 arp static 0019-db8c-5eb2 1 Ethernet0/1 arp static 60 0019-2159-4391 1 Ethernet0/1 arp static 8 0019-db8c-648d 1 Ethernet0/1 arp static 04 00f0-4c88-6eca 1 Ethernet0/1 arp static 06 0019-2159-a115 1 Ethernet0/1 arp static 3 0019-db8c-5d4f 1 Ethernet0/1 arp static 08 00f0-4c88-6ec8 1 Ethernet0/1 arp static 09 0019-2154-c3d4 1 Ethernet0/1 arp static 6 0019-db8c-62d8 1 Ethernet0/1 arp static 11 0019-2159-45ed 1 Ethernet0/1 arp static 59 0019-2159-ab66 1 Ethernet0/1 arp static 12 0019-2159-47b9 1 Ethernet0/1 arp static 0019-db8c-62a1 1 Ethernet0/1 arp static 0 0019-db8c-5ec3 1 Ethernet0/1 arp static 10 0019-2159-a6fa 1 Ethernet0/1 arp static 0019-db8c-5f24 1 Ethernet0/1 arp static 58 0019-2159-483f 1 Ethernet0/1 arp static 0019-db8c-5c2a 1 Ethernet0/1 arp static 5 0019-db8c-68df 1 Ethernet0/1 arp static 9 0019-db8c-6e09 1 Ethernet0/1 arp static 14 0019-2159-4876 1 Ethernet0/1 arp static 15 00f0-4c88-7413 1 Ethernet0/1 arp static 2 0019-db83-3b4b 1 Ethernet0/1 arp static 1 0019-db8c-68f4 1 Ethernet0/1 arp static 1 0019-db8c-6f6a 1 Ethernet0/1 arp static 8 0019-db8c-5d52 1 Ethernet0/1 arp static 0 0019-db8c-692c 1 Ethernet0/1 arp static 57 0019-2159-53b4 1 Ethernet0/1 arp static 0019-db8c-5e7f 1 Ethernet0/1 arp static 56 0019-214b-a834 1 Ethernet0/1 arp static 6 0019-db8c-5c06 1 Ethernet0/1 arp static 9 0019-db8c-6364 1 Ethernet0/1 arp static 7 0019-db8c-5fbb 1 Ethernet0/1 arp static 13 0019-2159-a6fc 1 Ethernet0/1 arp static 9 0019-db8c-5eb6 1 Ethernet0/1 arp static 5 0019-db8c-5c35 1 Ethernet0/1 arp static 4 0019-db8c-5e6f 1 Ethernet0/1 arp static 0 0019-db8c-5ea3 1 Ethernet0/1 arp static 7 0019-db8c-6108 1 Ethernet0/1 arp static 17 0019-2159-4389 1 Ethernet0/1 arp static 8 0019-db8c-5c77 1 Ethernet0/1 arp static 16 00f0-4c88-6ed2 1 Ethernet0/1 arp static 1 0019-db8c-6d1c 1 Ethernet0/1 arp static 2 0019-db8c-6142 1 Ethernet0/1 arp static 18 0019-2154-c215 1 Ethernet0/1 arp static 55 0019-2159-4819 1 Ethernet0/1 arp static 63 0019-214f-df03 1 Ethernet0/1 arp static 0 0019-db8c-6907 1 Ethernet0/1 arp static 4 0019-db8c-5c37 1 Ethernet0/1 arp static 64 0019-2159-44d2 1 Ethernet0/1 arp static 3 0019-db8c-6e2b 1 Ethernet0/1 arp static 3 0019-db8c-5e93 1 Ethernet0/1 arp static 5 0019-db8c-5c7d 1 Ethernet0/1 arp static 21 0019-2159-50e3 1 Ethernet0/1 arp static 1 0019-db8c-6302 1 Ethernet0/1 arp static 65 0019-2159-51b3 1 Ethernet0/1 arp static 4 0019-db8c-6303 1 Ethernet0/1 arp static 5 0019-db8c-5e87 1 Ethernet0/1 arp static 19 0019-212f-a6b3 1 Ethernet0/1 arp static 61 0019-2154-a9a2 1 Ethernet0/1 arp static 20 0019-2159-50dc 1 Ethernet0/1 arp static 5 0019-db8c-64fa 1 Ethernet0/1 arp static 62 0019-2159-aa15 1 Ethernet0/1 arp static 8 0019-db8c-6d07 1 Ethernet0/1 arp static 2 0019-db8c-6434 1 Ethernet0/1 arp static 0 0019-db8c-5e78 1 Ethernet0/1 arp static 4 0019-db8c-632c 1 Ethernet0/1 arp static 22 0019-214f-d426 1 Ethernet0/1 arp static 70 0019-2159-4ad6 1 Ethernet0/1 arp static 66 0019-2154-b761 1 Ethernet0/1 arp static 6 0019-db8c-63ea 1 Ethernet0/1 arp static 79 0019-2159-52b4 1 Ethernet0/1 arp static 69 00f0-4c88-6ed4 1 Ethernet0/1 arp static 24 00f0-4c88-6ed8 1 Ethernet0/1 arp static 7 00f0-4c88-6ecc 1 Ethernet0/1 arp static 4 0019-db8c-5d50 1 Ethernet0/1 arp static 78 0019-214f-d938 1 Ethernet0/1 arp static 68 0019-214b-9113 1 Ethernet0/1 arp static 7 0019-db8c-6910 1 Ethernet0/1 arp static 73 0019-2159-ab71 1 Ethernet0/1 arp static 5 00e0-3903-061d 1 Ethernet0/1 arp static 67 0019-214f-c9de 1 Ethernet0/1 arp static 76 0019-2159-a771 1 Ethernet0/1 arp static 23 00f0-4c88-6ed3 1 Ethernet0/1 arp static 75 0019-2159-d8f4 1 Ethernet0/1 arp static 74 0019-2154-a994 1 Ethernet0/1 arp static 54 0019-212f-a6c4 1 Ethernet0/1 arp static 9 0019-db8c-6528 1 Ethernet0/1 arp static 80 0019-2159-47da 1 Ethernet0/1 arp static 85 0019-2150-18e7 1 Ethernet0/1 arp static 26 0019-21a1-e7d2 1 Ethernet0/1 arp static 77 0019-2154-aeae 1 Ethernet0/1 arp static 72 0019-214f-e540 1 Ethernet0/1 arp static 6 0019-db8c-5e75 1 Ethernet0/1 arp static 53 0019-2154-c16d 1 Ethernet0/1 arp static 3 0019-db8c-6b57 1 Ethernet0/1 arp static 86 0019-21a3-fef1 1 Ethernet0/1 arp static 81 0019-212f-a6b0 1 Ethernet0/1 arp static 51 0019-2159-a23e 1 Ethernet0/1 arp static 2 0019-db8c-68e7 1 Ethernet0/1 arp static 82 0019-2154-b760 1 Ethernet0/1 arp static 87 0019-214f-defc 1 Ethernet0/1 arp static 38 0019-2154-bfcd 1 Ethernet0/1 arp static 8 0019-db8c-692b 1 Ethernet0/1 arp static 39 0019-2159-52b3 1 Ethernet0/1 arp static 35 0019-2159-4754 1 Ethernet0/1 arp static 46 0019-2159-44cf 1 Ethernet0/1 arp static 44 0019-2159-47eb 1 Ethernet0/1 arp static 43 0019-2159-47e1 1 Ethernet0/1 arp static 40 0019-2154-96b2 1 Ethernet0/1 arp static 33 0019-2154-acec 1 Ethernet0/1 arp static 07 00f0-4c88-6ecb 1 Ethernet0/1 arp static 42 0019-214f-c7c0 1 Ethernet0/1 arp static 41 0019-214f-d932 1 Ethernet0/1 arp static 25 0019-2159-a6f7 1 Ethernet0/1 arp static 27 0019-214b-9b87 1 Ethernet0/1 arp static 52 0019-2154-ba8c 1 Ethernet0/1 arp static 28 0019-2154-b75f 1 Ethernet0/1 arp static 84 0019-2159-aa0a 1 Ethernet0/1 arp static 01 00f0-4c88-6ec9 1 Ethernet0/1 arp static 96 0019-2159-5322 1 Ethernet0/1 arp static 7 0019-db8c-6578 1 Ethernet0/1 arp static 6 00f0-4c88-6ece 1 Ethernet0/1 arp static 83 0019-2159-a773 1 Ethernet0/1 arp static 94 0019-2159-5151 1 Ethernet0/1 arp static 4 00f0-4c88-6ed9 1 Ethernet0/1 arp static 97 0019-214f-d93b 1 Ethernet0/1 arp static 50 00e0-3203-0f65 1 Ethernet0/1 arp static 91 0019-2159-a35b 1 Ethernet0/1 arp static 90 0019-2159-4654 1 Ethernet0/1 arp static 93 0019-214b-b1b4 1 Ethernet0/1 arp static 0 0019-db8c-5c8b 1 Ethernet0/1 arp static 1 00f0-4c88-6ecd 1 Ethernet0/1 arp static 95 0019-2159-4380 1 Ethernet0/1 arp static 2 00f0-4c88-677e 1 Ethernet0/1 arp static 48 0019-2159-463c 1 Ethernet0/1 arp static 89 0019-214b-8f7b 1 Ether