防火墙的命令

用户：admin
密码：admin@123
安全域的配置  安全域添加端口
firewall zone trust
add interface g1/0/1
firewall zone dmz 
add interface g1/0/2
安全策略
securty-policy
rule name test1
source-zone dmz
source-zone untrust
action permit
开启web管理
sys
web-manager enable
int g0/0/0
ip add 192.168.100.1 24
service-manage ping permint
service-manage enable
service-manage https permit
security-policy
rule name guanli
source-zone trust
destination-zone local
action permit
ANT策略
nat-policy
rule name dianmin
source-zone trust
destination-zone untrust
action source-nat easy-ip
服务器映射
nat server global 64.1.1.2 inside 172.16.1.1
rule name dmz
source-zone trust
destination-zone dmz
destinaion-address 172.16.1.1 mask 255.255.255.255
service ftp
action permit