防火牆配置

環境：ensp

防火牆usg6000v

cloud

預設使用者名稱和密碼admin admin@123

①系統檢視下開啟telnet server

sys

[usg6000v1]telnet server enable

[usg6000v1]user-inte***ce vty 0 4

[usg6000v1-ui-vty0-4]
authentication-mode aaa
user privilege level 15
protocal inbound telnet

[usg6000v1]aaa #aaa方式，需要提供賬號和密碼

[usg6000v1-aaa]manager-user huawei
[usg6000v1-aaa-manager-user-huawei]password cipher ******
[usg6000v1-aaa-manager-user-huawei]service-type telnet 
[usg6000v1-aaa-manager-user-huawei]level 15

int g0/0/0

service-manage telnet permit

firewall zone trust

add inte***ce gigabitethernet0/0/0

注意第一次登入需要修改密碼

開啟ssh服務

①開啟ssh服務

[usg6000v1]stelnet server enable

[usg6000v1]ssh user xiaomi

[usg6000v1]ssh user xiaomi authentication-type password
[usg6000v1]ssh user xiaomi service-type stelnet
[usg6000v1]dis ssh user

[usg6000v1]aaa

[usg6000v1-aaa]manager-user xiaomi
[usg6000v1-aaa-manager-user-xiaomi]password cipher ******xx
[usg6000v1-aaa-manager-user-xiaomi]service-type ssh
[usg6000v1-aaa-manager-user-xiaomi]level 15

[usg6000v1]user-inte***ce vty 0 4

authentication-mode aaa
user privilege level 15
protocal inbound ssh

[usg6000v1]firewall zone trust

add inte***ce gigabitethernet0/0/0

初次登入需要修改密碼，直接登入即可。

配置防火牆

今天學了下如何配置網路防火牆，用於過濾乙個段的ip位址不能訪問路由器。第二步開啟防火牆 firewall enable 第三步設定預設，允許或者禁止 firewall default permit 第四步設定規則 acl number 2001 rule 1 deny source 192.168....

防火牆配置

一次在某個防火牆配置策略裡看到如下的 iptables a input p icmp icmp type 8 j accept iptables a forward p icmp icmp type 8 j accept iptables a input p icmp icmp type 11 j ...

防火牆配置

開啟 systemctl start firewalld 重啟 systemctl restart firewalld 關閉 systemctl stop firewalld 狀態 systemctl status firewalld 防火牆規則 如圖 firewall cmd list all 查...