华为防火墙设置

1、用户名：admin 密码;Admin123第一次配制时，可以设置本地IP自动获取。也可以设置成IP192.168.0.X/ (x=2-254)防火墙的IP: 配制如下：# sysname USG2130# web-manager enable# info-center source default channel 4 log level notifications# firewall packet-filter default permit interzone local trust direction inbound firewall pac

2、ket-filter default permit interzone local trust direction outbound# firewall permit sub-ip# dhcp enable# firewall mode route# firewall statistic system enable # set runmode firewall#interface Cellular5/0/0 link-protocol ppp#vlan 1#interface Vlanif1 ip address dhcp select in

3、terface#interface Ethernet0/0/0#interface Ethernet1/0/0#interface Ethernet1/0/1#interface Ethernet1/0/2#interface Ethernet1/0/3#interface Ethernet1/0/4#interface Ethernet1/0/5#interface Ethernet1/0/6#interface Ethernet1/0/7#interface NULL0#right-manager server-group #cwmp #firewall zone local set pr

4、iority 100#firewall zone trust set priority 85 add interface Vlanif1#firewall zone untrust set priority 5 add interface Ethernet0/0/0#firewall zone dmz set priority 50#firewall interzone local trust#firewall interzone local untrust#firewall interzone local dmz#firewall interzone trust untrust#firewa

5、ll interzone trust dmz#firewall interzone dmz untrust#aaa local-user maintainadmin password simple maintainadmin local-user maintainadmin level 3 local-user admin password cipher MQ;4B+4Z,YWX*NZ55OA! local-user admin level 3 local-user admin ftp-directory flash:/ authentication-scheme default# autho

6、rization-scheme default# accounting-scheme default # domain default# slb#user-interface con 0user-interface tty 81 authentication-mode none modem bothuser-interface vty 0 4 authentication-mode aaa#common update auto time 2:30#surfbehavior#ips# protocol#mailfilter用网线接上 fe1/0/0 口，我们来做如下的要求建二个vlan vlan

7、100 vlan200FFFe/1/0/1-fe/10/3要与Fe/1/0/4-fe/10/7通信，则FFe/1/0/4-fe/10/7的网关要设置成.1Fe/1/0/0的配制不变，还是处于默认的/24 段步骤如下：把网线接在F打开ie，在IE里输入：如下图 输入用户名：admin 密码：Admin123点击“网络管理”-“Vlan”在点新建Vlan ID 写入100 点击应用就好了，现在vlan 100就建好了现在给vlan 100加入接口Fe/1/0/1-fe/10/3点击接口在点右边ethernet1/0/1 的详细 在vlan 里写入100 点应用现在ethern

8、et1/0/1就加入vlan 100了重得上面的步骤，把ethernet1/0/2 ethernet1/0/3加入vlan 100接下来建vlan 200也是按上面的步骤，只是id里写入200就可以然后在一个一个的把接口加入vlan 200就行做完后，可以看到配制文件如下：interface Ethernet0/0/0#interface Ethernet1/0/0#interface Ethernet1/0/1 port access vlan 100#interface Ethernet1/0/2 port access vlan 100#interface Ethernet1/0/3 port access vlan 100#interface Ethernet1/0/4 port access vlan 200#interface Ethernet1/0/5 port access vlan 200#interface Ethernet1/0/6 port access vlan 200#interface Ethernet1/0/7 port access vlan 200#最后就是给vlan分配网段与ip点击接口：在