Username:huawei
Password:
<3lou-secpath100f>display interface ethernet 0/0/0
^
% Wrong parameter found at '^' position.
<3lou-secpath100f>display interface ethernet 2/0/0
^
% Wrong parameter found at '^' position.
<3lou-secpath100f>
<3lou-secpath100f>
<3lou-secpath100f>
<3lou-secpath100f>undo 3001
^
% Unrecognized command found at '^' position.
<3lou-secpath100f>
<3lou-secpath100f>display curr
#
sysname 3lou-secpath100f
#
undo info-center enable
#
firewall packet-filter enable
firewall packet-filter default permit
#
insulate
#
firewall url-filter host ip-address permit
#
firewall statistic system enable
#
radius scheme system
#
domain system
#
local-user dhobi
password simple jqka
service-type telnet
level 3
local-user huawei
password simple Xxjsxz07
service-type telnet terminal
level 3
local-user kxt
password cipher 92IL05/SGIOQ=^Q`MAF4<1!!
service-type telnet
level 3
#
acl number 2000
rule 0 permit source 192.168.0.0 0.0.255.255
rule 1 permit source 172.16.0.0 0.0.255.255
acl number 2001
rule 0 permit source 192.168.0.0 0.0.255.255
rule 1 permit source 172.16.0.0 0.0.255.255
acl number 2008
rule 0 permit source 192.168.20.2 0
rule 1 permit source 192.168.90.31 0
rule 2 permit source 192.168.90.91 0
rule 3 permit source 192.168.90.80 0
rule 4 permit source 192.168.90.9 0
rule 5 permit source 192.168.90.101 0
rule 6 permit source 192.168.90.3 0
rule 7 permit source 192.168.80.22 0
rule 8 permit source 192.168.80.13 0
rule 9 permit source 192.168.80.15 0
rule 10 permit source 192.168.80.16 0
rule 11 permit source 192.168.50.23 0
rule 12 permit source 192.168.70.43 0
rule 13 permit source 192.168.70.16 0
rule 14 permit source 192.168.70.251 0
rule 15 permit source 192.168.70.68 0
rule 16 permit source 192.168.70.20 0
rule 17 permit source 192.168.70.25 0
rule 18 permit source 192.168.70.60 0
rule 19 permit source 192.168.40.0 0.0.0.255
rule 20 permit source 192.168.41.0 0.0.0.255
rule 21 permit source 192.168.30.0 0.0.0.255
rule 22 permit source 192.168.20.1 0.0.0.250
rule 23 permit source 192.168.1.0 0.0.0.255
rule 24 deny
rule 25 permit source 192.168.41.3 0
#
acl number 3000
rule 0 deny udp destination-port eq tftp
rule 1 deny tcp destination-port eq 3332
rule 2 deny tcp destination-port eq 9996
rule 3 deny tcp destination-port eq 9994
rule 6 deny udp destination-port eq 4444
rule 7 deny tcp destination-port eq 4444
rule 8 deny tcp destination-port eq 5554
rule 9 deny tcp destination-port eq 6669
rule 10 deny tcp destination-port eq 445
rule 11 deny udp destination-port eq 445
rule 12 deny tcp destination-port eq 593
rule 13 deny udp destination-port eq 593
rule 14 deny udp destination-port eq 1434
rule 52 deny udp destination-port range 4000 4005
rule 55 deny tcp destination-port range 4000 4005
rule 57 permit tcp destination-port range 1000 1100
rule 58 permit tcp destination-port range 8000 8100
rule 60 deny tcp
acl number 3001
rule 10 permit tcp destination-port range 1000 1100
rule 20 permit tcp destination-port range 8000 8100
rule 30 deny tcp
#
interface Aux0
undo detect dsr-dtr
async mode flow
#
interface Ethernet0/0
ip address 172.16.0.1 255.255.255.252
firewall packet-filter 3001 outbound
#
interface Ethernet0/1
#
interface Ethernet0/2
#
interface Ethernet0/3
#
interface Ethernet1/0
ip address 222.209.208.55 255.255.255.0
nat outbound 2000
nat server protocol tcp global 222.209.208.55 pop3 inside 192.168.30.240 pop3
nat server protocol tcp global 222.209.208.55 smtp inside 192.168.30.240 smtp
nat server protocol tcp global 222.209.208.55 443 inside 192.168.30.240 443
nat server protocol tcp global 222.209.208.55 ftp inside 192.168.30.250 ftp
nat server protocol tcp global 222.209.208.55 3389 inside 192.168.30.2 3389
nat server protocol udp global 222.209.208.55 3389 inside 192.168.30.2 3389
#
interface Ethernet1/1
#
interface Ethernet1/2
ip address 221.10.18.54 255.255.255.252
nat outbound 2001
nat server protocol tcp global 221.10.18.54 pop3 inside 192.168.20.240 pop3
nat server protocol tcp global 221.10.18.54 smtp inside 192.168.20.240 smtp
#
interface NULL0
#
firewall zone local
set priority 100
#
firewall zone trust
add interface Ethernet0/0
set priority 85
#
firewall zone untrust
add interface Ethernet1/0
add interface Ethernet1/2
set priority 5
#
firewall zone DMZ
set priority 50
#
firewall interzone local trust
#
firewall interzone local untrust
#
firewall interzone local DMZ
#
firewall interzone trust untrust
#
firewall interzone trust DMZ
#
firewall interzone DMZ untrust
#
ip route-static 0.0.0.0 0.0.0.0 222.209.208.1 preference 60
ip route-static 0.0.0.0 0.0.0.0 221.10.18.53 preference 80
ip route-static 59.80.0.0 255.252.0.0 221.10.18.53 preference 60
ip route-static 60.0.0.0 255.248.0.0 221.10.18.53 preference 60
ip route-static 60.8.0.0 255.254.0.0 221.10.18.53 preference 60
ip route-static 60.10.0.0 255.255.0.0 221.10.18.53 preference 60
ip route-static 60.12.0.0 255.255.0.0 221.10.18.53 preference 60
ip route-static 60.13.0.0 255.255.192.0 221.10.18.53 preference 60
ip route-static 60.13.128.0 255.255.128.0 221.10.18.53 preference 60
ip route-static 60.16.0.0 255.240.0.0 221.10.18.53 preference 60
ip route-static 60.208.0.0 255.248.0.0 221.10.18.53 preference 60
ip route-static 60.216.0.0 255.254.0.0 221.10.18.53 preference 60
ip route-static 60.220.0.0 255.252.0.0 221.10.18.53 preference 60
ip route-static 61.4.64.0 255.255.240.0 221.10.18.53 preference 60
ip route-static 61.128.210.0 255.255.255.0 221.10.18.53 preference 60
ip route-static 61.133.0.0 255.255.128.0 221.10.18.53 preference 60
ip route-static 61.134.96.0 255.255.224.0 221.10.18.53 preference 60
ip route-static 61.134.128.0 255.255.128.0 221.10.18.53 preference 60
ip route-static 61.135.0.0 255.255.0.0 221.10.18.53 preference 60
ip route-static 61.136.0.0 255.255.0.0 221.10.18.53 preference 60
ip route-static 61.148.0.0 255.254.0.0 221.10.18.53 preference 60
ip route-static 61.156.0.0 255.255.0.0 221.10.18.53 preference 60
ip route-static 61.158.0.0 255.255.0.0 221.10.18.53 preference 60
ip route-static 61.158.128.0 255.255.128.0 221.10.18.53 preference 60
ip route-static 61.159.0.0 255.255.192.0 221.10.18.53 preference 60
ip route-static 61.161.0.0 255.255.192.0 221.10.18.53 preference 60
ip route-static 61.161.128.0 255.255.128.0 221.10.18.53 preference 60
ip route-static 61.162.0.0 255.254.0.0 221.10.18.53 preference 60
ip route-static 61.167.0.0 255.255.0.0 221.10.18.53 preference 60
ip route-static 61.168.0.0 255.255.0.0 221.10.18.53 preference 60
ip route-static 61.176.0.0 255.255.0.0 221.10.18.53 preference 60
ip route-static 61.179.0.0 255.255.0.0 221.10.18.53 preference 60
ip route-static 61.180.13.0 255.255.255.0 221.10.18.53 preference 60
ip route-static 61.180.128.0 255.255.128.0 221.10.18.53 preference 60
ip route-static 61.181.0.0 255.255.0.0 221.10.18.53 preference 60
ip route-static 61.182.0.0 255.255.0.0 221.10.18.53 preference 60
ip route-static 61.183.0.0 255.255.0.0 221.10.18.53 preference 60
ip route-static 61.189.0.0 255.255.128.0 221.10.18.53 preference 60
ip route-static 61.237.148.0 255.255.255.0 221.10.18.53 preference 60
ip route-static 162.105.0.0 255.255.0.0 221.10.18.53 preference 60
ip route-static 166.111.0.0 255.255.0.0 221.10.18.53 preference 60
ip route-static 192.168.0.0 255.255.0.0 172.16.0.2 preference 60
ip route-static 194.105.0.0 255.255.255.0 221.10.18.53 preference 60
ip route-static 202.4.128.0 255.255.224.0 221.10.18.53 preference 60
ip route-static 202.38.64.0 255.255.224.0 221.10.18.53 preference 60
ip route-static 202.38.96.0 255.255.224.0 221.10.18.53 preference 60
ip route-static 202.38.192.0 255.255.192.0 221.10.18.53 preference 60
ip route-static 202.94.64.0 255.255.224.0 221.10.18.53 preference 60
ip route-static 202.96.0.0 255.255.192.0 221.10.18.53 preference 60
ip route-static 202.96.64.0 255.255.224.0 221.10.18.53 preference 60
ip route-static 202.97.128.0 255.255.128.0 221.10.18.53 preference 60
ip route-static 202.98.0.0 255.255.224.0 221.10.18.53 preference 60
ip route-static 202.99.0.0 255.255.0.0 221.10.18.53 preference 60
ip route-static 202.102.128.0 255.255.192.0 221.10.18.53 preference 60
ip route-static 202.102.224.0 255.255.224.0 221.10.18.53 preference 60
ip route-static 202.106.0.0 255.255.0.0 221.10.18.53 preference 60
ip route-static 202.107.0.0 255.255.128.0 221.10.18.53 preference 60
ip route-static 202.108.0.0 255.255.0.0 221.10.18.53 preference 60
ip route-static 202.110.0.0 255.255.128.0 221.10.18.53 preference 60
ip route-static 202.110.192.0 255.255.192.0 221.10.18.53 preference 60
ip route-static 202.111.128.0 255.255.192.0 221.10.18.53 preference 60
ip route-static 202.112.0.0 255.254.0.0 221.10.18.53 preference 60
ip route-static 202.114.0.0 255.255.0.0 221.10.18.53 preference 60
ip route-static 202.115.0.0 255.255.0.0 221.10.18.53 preference 60
ip route-static 202.116.0.0 255.255.0.0 221.10.18.53 preference 60
ip route-static 202.117.0.0 255.255.0.0 221.10.18.53 preference 60
ip route-static 202.118.0.0 255.255.0.0 221.10.18.53 preference 60
ip route-static 202.119.0.0 255.255.0.0 221.10.18.53 preference 60
ip route-static 202.120.0.0 255.254.0.0 221.10.18.53 preference 60
ip route-static 202.192.0.0 255.254.0.0 221.10.18.53 preference 60
ip route-static 202.194.0.0 255.254.0.0 221.10.18.53 preference 60
ip route-static 202.196.0.0 255.254.0.0 221.10.18.53 preference 60
ip route-static 202.198.0.0 255.254.0.0 221.10.18.53 preference 60
ip route-static 202.200.0.0 255.254.0.0 221.10.18.53 preference 60
ip route-static 202.202.0.0 255.254.0.0 221.10.18.53 preference 60
ip route-static 202.204.0.0 255.252.0.0 221.10.18.53 preference 60
ip route-static 203.93.0.0 255.255.0.0 221.10.18.53 preference 60
ip route-static 203.175.192.0 255.255.192.0 221.10.18.53 preference 60
ip route-static 210.12.0.0 255.254.0.0 221.10.18.53 preference 60
ip route-static 210.14.160.0 255.255.224.0 221.10.18.53 preference 60
ip route-static 210.14.192.0 255.255.192.0 221.10.18.53 preference 60
ip route-static 210.15.0.0 255.255.128.0 221.10.18.53 preference 60
ip route-static 210.15.128.0 255.255.192.0 221.10.18.53 preference 60
ip route-static 210.21.0.0 255.255.0.0 221.10.18.53 preference 60
ip route-static 210.22.0.0 255.255.0.0 221.10.18.53 preference 60
ip route-static 210.25.0.0 255.255.0.0 221.10.18.53 preference 60
ip route-static 210.26.0.0 255.254.0.0 221.10.18.53 preference 60
ip route-static 210.28.0.0 255.254.0.0 221.10.18.53 preference 60
ip route-static 210.30.0.0 255.255.0.0 221.10.18.53 preference 60
ip route-static 210.31.0.0 255.255.0.0 221.10.18.53 preference 60
ip route-static 210.32.0.0 255.252.0.0 221.10.18.53 preference 60
ip route-static 210.36.0.0 255.252.0.0 221.10.18.53 preference 60
ip route-static 210.40.0.0 255.254.0.0 221.10.18.53 preference 60
ip route-static 210.42.0.0 255.254.0.0 221.10.18.53 preference 60
ip route-static 210.44.0.0 255.254.0.0 221.10.18.53 preference 60
ip route-static 210.45.128.0 255.255.240.0 221.10.18.53 preference 60
ip route-static 210.46.0.0 255.254.0.0 221.10.18.53 preference 60
<3lou-secpath100f>acl number 3001
^
% Unrecognized command found at '^' position.
<3lou-secpath100f>sys
System View: return to User View with Ctrl+Z.
[3lou-secpath100f]acl number 3001
[3lou-secpath100f-acl-adv-3001]undo rule 30 deny
^
% Too many parameters found at '^' position.
[3lou-secpath100f-acl-adv-3001]undo rule 30
[3lou-secpath100f-acl-adv-3001]quit
[3lou-secpath100f]save
The configuration will be written to the device.
Are you sure?[Y/N]y
Now saving current configuration to the device.
Saving configuration flash:/config.cfg. Please wait...
.............
Current configuration has been saved to the device successfully.
[3lou-secpath100f]