SecPath防火墻雙機(jī)熱備典型配置_第1頁
SecPath防火墻雙機(jī)熱備典型配置_第2頁
SecPath防火墻雙機(jī)熱備典型配置_第3頁
SecPath防火墻雙機(jī)熱備典型配置_第4頁
SecPath防火墻雙機(jī)熱備典型配置_第5頁
已閱讀5頁，還剩52頁未讀， 繼續(xù)免費(fèi)閱讀

下載本文檔

版權(quán)說明：本文檔由用戶提供并上傳，收益歸屬內(nèi)容提供方，若內(nèi)容存在侵權(quán)，請進(jìn)行舉報或認(rèn)領(lǐng)

文檔簡介

圖3）命令行配置：f1000E01:#version5.20,Feature3101#sysnamefw01#undovoicevlanmac-address00e0-bb00-0000#domaindefaultenablesystem#vlan1#domainsystemaccess-limitdisablestateactiveidle-cutdisableself-service-urldisable#user-groupsystem#local-userh3cpasswordcipherG`M^B<SDBB[Q=^Q`MAF4<1!!authorization-attributelevel3service-typetelnet#interfaceAux0asyncmodeflowlink-protocolppp#interfaceNULL0#interfaceGigabitEthernet0/0portlink-moderouteipaddress1#interfaceGigabitEthernet0/2portlink-moderouteipaddress1vrrpvrid11virtual-ipvrrpvrid11priority105vrrpvrid11trackinterfaceGigabitEthernet0/3#interfaceGigabitEthernet0/3portlink-moderouteipaddress1vrrpvrid122virtual-ip#interfaceGigabitEthernet1/1portlink-moderoute#interfaceGigabitEthernet1/2portlink-moderoute#interfaceGigabitEthernet1/3portlink-moderoute#interfaceGigabitEthernet1/4portlink-moderoute#interfaceGigabitEthernet1/5portlink-moderoute#interfaceGigabitEthernet1/6portlink-moderoute#interfaceGigabitEthernet1/7portlink-moderoute#iproute-static54#arptimeraging1440#loadxml-configuration#user-interfacecon0idle-timeout00user-interfaceaux0user-interfacevty04F1000e02:#version5.20,Feature3101#sysnamefw02#undovoicevlanmac-address00e0-bb00-0000#domaindefaultenablesystem#vlan1#domainsystemaccess-limitdisablestateactiveidle-cutdisableself-service-urldisable#user-groupsystem#local-userh3cpasswordcipherG`M^B<SDBB[Q=^Q`MAF4<1!!authorization-attributelevel3service-typetelnet#interfaceAux0asyncmodeflowlink-protocolppp#interfaceNULL0#interfaceGigabitEthernet0/0portlink-moderouteipaddress2#interfaceGigabitEthernet0/2portlink-moderouteipaddress2vrrpvrid11virtual-ip#interfaceGigabitEthernet0/3portlink-moderouteipaddress2vrrpvrid122virtual-ipvrrpvrid122priority105vrrpvrid122trackinterfaceGigabitEthernet0/2#interfaceGigabitEthernet1/1portlink-moderoute#interfaceGigabitEthernet1/2portlink-moderoute#interfaceGigabitEthernet1/3portlink-moderoute#interfaceGigabitEthernet1/4portlink-moderoute#interfaceGigabitEthernet1/5portlink-moderoute#interfaceGigabitEthernet1/6portlink-moderoute#interfaceGigabitEthernet1/7portlink-moderoute#iproute-static54#loadxml-configuration#user-interfacecon0idle-timeout00user-interfaceaux0user-interfacevty04數(shù)據(jù)流向：WEB配置：驗(yàn)證結(jié)果pc1從serverhttp/ftp、方式get文件，連接不中斷；VRRP狀態(tài)：<fw01>disvrrpIPv4StandbyInformation:RunMethod:VIRTUAL-MACTotalnumberofvirtualrouters:2InterfaceVRIDStateRunAdver.AuthVirtualPriTimeTypeIPGE0/211Master1051NONEGE0/3122Backup1001NONE[fw02-GigabitEthernet0/3]disvrrpIPv4StandbyInformation:RunMethod:VIRTUAL-MACTotalnumberofvirtualrouters:2InterfaceVRIDStateRunAdver.AuthVirtualPriTimeTypeIPGE0/211Backup1001NONEGE0/3122Master1051NONE注意事項(xiàng)本配置完成，清除防火墻中所做的配置，以防對其他配置產(chǎn)生影響。路由模式＋負(fù)載分擔(dān)模式＋支持非對稱路徑功能簡述（F1000E為例）通過Vlan虛接口實(shí)現(xiàn)三層轉(zhuǎn)發(fā)。典型配置步驟（組網(wǎng)4）命令行配置：#F1000E-1:#version5.20,Feature3101#sysnamefw01#undovoicevlanmac-address00e0-bb00-0000#nataddress-group154level1nataddress-group254level1#domaindefaultenablesystem#aclnumber3000rule0permitipsource0aclnumber3001rule0permitipsource0#vlan1#domainsystemaccess-limitdisablestateactiveidle-cutdisableself-service-urldisable#user-groupsystem#local-userh3cpasswordcipherG`M^B<SDBB[Q=^Q`MAF4<1!!authorization-attributelevel3service-typetelnet#interfaceAux0asyncmodeflowlink-protocolppp#interfaceNULL0#interfaceGigabitEthernet0/0portlink-moderouteipaddress1#interfaceGigabitEthernet0/2portlink-moderouteipaddress1vrrpvrid11virtual-ipvrrpvrid11priority105vrrpvrid11trackinterfaceGigabitEthernet0/3vrrpvrid111virtual-ip#interfaceGigabitEthernet0/3portlink-moderoutenatoutbound3001address-group2trackvrrp12natoutbound3000address-group1trackvrrp122ipaddress1vrrpvrid12virtual-ipvrrpvrid12priority105vrrpvrid12trackinterfaceGigabitEthernet0/2vrrpvrid122virtual-ip#interfaceGigabitEthernet1/1portlink-moderoute#interfaceGigabitEthernet1/2portlink-moderoute#interfaceGigabitEthernet1/3portlink-moderoute#interfaceGigabitEthernet1/4portlink-moderoute#interfaceGigabitEthernet1/5portlink-moderoute#interfaceGigabitEthernet1/6portlink-moderoute#interfaceGigabitEthernet1/7portlink-moderoute#iproute-static54#arptimeraging1440#loadxml-configuration#user-interfacecon0idle-timeout00user-interfaceaux0user-interfacevty04#returnF1000E-2:#version5.20,Feature3101#sysnamefw02#undovoicevlanmac-address00e0-bb00-0000#ikesanat-keepalive-timerinterval0#nataddress-group154level1nataddress-group254level1#domaindefaultenablesystem#aclnumber3000rule0permitipsource0aclnumber3001rule0permitipsource0#vlan1#domainsystemaccess-limitdisablestateactiveidle-cutdisableself-service-urldisable#user-groupsystem#local-userh3cpasswordcipherG`M^B<SDBB[Q=^Q`MAF4<1!!authorization-attributelevel3service-typetelnet#interfaceAux0asyncmodeflowlink-protocolppp#interfaceNULL0#interfaceGigabitEthernet0/0portlink-moderouteipaddress2#interfaceGigabitEthernet0/2portlink-moderouteshutdownipaddress2vrrpvrid11virtual-ipvrrpvrid111virtual-ipvrrpvrid111priority105vrrpvrid111trackinterfaceGigabitEthernet0/3#interfaceGigabitEthernet0/3portlink-moderoutenatoutbound3001address-group2trackvrrp12natoutbound3000address-group1trackvrrp122ipaddress2vrrpvrid12virtual-ipvrrpvrid122virtual-ipvrrpvrid122priority105vrrpvrid122trackinterfaceGigabitEthernet0/2#interfaceGigabitEthernet1/1portlink-moderoute#interfaceGigabitEthernet1/2portlink-moderoute#in

溫馨提示

  • 1. 本站所有資源如無特殊說明，都需要本地電腦安裝OFFICE2007和PDF閱讀器。圖紙軟件為CAD,CAXA,PROE,UG,SolidWorks等.壓縮文件請下載最新的WinRAR軟件解壓。
  • 2. 本站的文檔不包含任何第三方提供的附件圖紙等，如果需要附件，請聯(lián)系上傳者。文件的所有權(quán)益歸上傳用戶所有。
  • 3. 本站RAR壓縮包中若帶圖紙，網(wǎng)頁內(nèi)容里面會有圖紙預(yù)覽，若沒有圖紙預(yù)覽就沒有圖紙。
  • 4. 未經(jīng)權(quán)益所有人同意不得將文件中的內(nèi)容挪作商業(yè)或盈利用途。
  • 5. 人人文庫網(wǎng)僅提供信息存儲空間，僅對用戶上傳內(nèi)容的表現(xiàn)方式做保護(hù)處理，對用戶上傳分享的文檔內(nèi)容本身不做任何修改或編輯，并不能對任何下載內(nèi)容負(fù)責(zé)。
  • 6. 下載文件中如有侵權(quán)或不適當(dāng)內(nèi)容，請與我們聯(lián)系，我們立即糾正。
  • 7. 本站不保證下載資源的準(zhǔn)確性、安全性和完整性, 同時也不承擔(dān)用戶因使用這些下載資源對自己和他人造成任何形式的傷害或損失。

最新文檔

評論

0/150

提交評論