防火墙如何配置防火墙混合模式

如何配置防火墙混合工作模式

案例一：

＋＋＋＋＋＋＋＋＋＋＋＋＋＋＋＋＋＋＋＋＋＋＋＋＋＋＋＋＋＋＋＋＋＋＋＋＋＋＋＋ 注：缺省访问权限都允许的情况下，完成如下的配置即可

具体的访问控制配置过程参考访问控制操作篇

此环境中由路由器完成NAT （源地址转换）功能以实现共享上网 ＋＋＋＋＋＋＋＋＋＋＋＋＋＋＋＋＋＋＋＋＋＋＋＋＋＋＋＋＋＋＋＋＋＋＋＋＋＋＋＋ 〖配置相应网口的工作模式以及IP 地址〗

TopsecOS# network interface eth0 no switchport

TopsecOS# network interface eth0 ip add 192.168.7.165 mask 255.255.255.0 TopsecOS# network interface eth0 no shutdown

TopsecOS# network interface eth1 switchport

TopsecOS# network interface eth1 switchport mode access

TopsecOS# network interface eth1 switchport access-vlan 1

TopsecOS# network interface eth1 no shutdown

TopsecOS# network interface eth2 switchport

TopsecOS# network interface eth2 switchport mode access

TopsecOS# network interface eth2 switchport access-vlan 1

TopsecOS# network interface eth2 no shutdown

〖配置缺省路由〗

TopsecOS# network route add dst 0.0.0.0/0 gw 192.168.7.1

〖简单的配置各个网口区域的缺省策略后即可正常通讯〗

TopsecOS# define area add name area_eth0 attribute 'eth0 ' access on TopsecOS# define area add name area_eth1 attribute 'eth1 ' access on TopsecOS# define area add name area_eth2 attribute 'eth2 ' access on

++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++

案例二：

＋＋＋＋＋＋＋＋＋＋＋＋＋＋＋＋＋＋＋＋＋＋＋＋＋＋＋＋＋＋＋＋＋＋＋＋

注：缺省访问权限都允许的情况下，完成如下的配置即可

具体的访问控制配置过程参考访问控制操作篇

＋＋＋＋＋＋＋＋＋＋＋＋＋＋＋＋＋＋＋＋＋＋＋＋＋＋＋＋＋＋＋＋＋＋＋＋

〖配置相应网口的工作模式以及IP 地址〗

TopsecOS# network interface eth0 no switchport

TopsecOS# network interface eth0 ip add 192.168.7.165 mask 255.255.255.0 TopsecOS# network interface eth0 no shutdown

TopsecOS# network interface eth1 switchport

TopsecOS# network interface eth1 switchport mode Trunk

TopsecOS# network interface eth1 switchport trunk encapsulation dot1q TopsecOS# network interface eth1 switchport trunk native-vlan 1

TopsecOS# network interface eth1 switchport access-vlan 10

TopsecOS# network interface eth1 switchport trunk allowed-vlan 1-1000 TopsecOS# network interface eth1 no shutdown

TopsecOS# network interface eth2 switchport

TopsecOS# network interface eth2 switchport mode access

TopsecOS# network interface eth2 switchport trunk encapsulation dot1q TopsecOS# network interface eth2 switchport trunk native-vlan 1

TopsecOS# network interface eth2 switchport access-vlan 30

TopsecOS# network interface eth2 switchport trunk allowed-vlan 1-1000 TopsecOS# network interface eth2 no shutdown

〖配置缺省路由〗

TopsecOS# network route add dst 0.0.0.0/0 gw 192.168.7.1

〖简单的配置各个网口区域的缺省策略后即可正常通讯〗

TopsecOS# define area add name area_eth0 attribute 'eth0 ' access on TopsecOS# define area add name area_eth1 attribute 'eth1 ' access on TopsecOS# define area add name area_eth2 attribute 'eth2 ' access on