2024年Web前端最全华为防火墙USG6000通过WEB图形界面配置案例(1)，真服了

学习分享，共勉

题外话，毕竟我工作多年，深知技术改革和创新的方向，Flutter作为跨平台开发技术、Flutter以其美观、快速、高效、开放等优势迅速俘获人心

开源分享：【大厂前端面试题解析+核心总结学习笔记+真实项目实战+最新讲解视频】

update schedule location-sdb weekly Sun 04:29

firewall defend action discard

banner enable

user-manage web-authentication security port 8887

undo privacy-statement english

undo privacy-statement chinese

page-setting

user-manage security version tlsv1.1 tlsv1.2

password-policy

level high

user-manage single-sign-on ad

user-manage single-sign-on tsm

user-manage single-sign-on radius

user-manage auto-sync online-user

web-manager security version tlsv1.1 tlsv1.2

web-manager enable

web-manager security enable

firewall dataplane to manageplane application-apperceive default-action drop

undo ips log merge enable

decoding uri-cache disable

feedback type threat-log enable

feedback type pdns enable

update schedule ips-sdb daily 01:03

update schedule av-sdb daily 01:03

update schedule sa-sdb daily 01:03

update schedule cnc daily 01:03

update schedule file-reputation daily 01:03

ip vpn-instance default

ipv4-family

ip-link check enable

ip-link name Linktest vpn-instance default

destination 0.0.0.0/0.0.0.0 interface GigabitEthernet0/0/0 mode icmp next-hop 1

.1.1.2

ip address-set FTP_Server type object

address 0 10.1.2.100 mask 32

time-range worktime

period-range 08:00:00 to 18:00:00 working-day

ike proposal default

encryption-algorithm aes-256 aes-192 aes-128

dh group14

authentication-algorithm sha2-512 sha2-384 sha2-256

authentication-method pre-share

integrity-algorithm hmac-sha2-256

prf hmac-sha2-256

aaa

authentication-scheme default

authentication-scheme admin_local

authentication-scheme admin_radius_local

authentication-scheme admin_hwtacacs_local

authentication-scheme admin_ad_local

authentication-scheme admin_ldap_local

authentication-scheme admin_radius

authentication-scheme admin_hwtacacs

authentication-scheme admin_ad

authorization-scheme default

accounting-scheme default

domain default

service-type internetaccess ssl-vpn l2tp ike

internet-access mode password

reference user current-domain

manager-user audit-admin

password cipher @%@%Zrwy:l}UIXr(g+IYOVqb^{q${UL$9Sr[@{C_yFj6fV)b}tq@%@%

service-type web terminal

level 15

manager-user api-admin

password cipher @%@%RbIt"|>Pz2NW1b@+[5@*lAb@{Q@w,<X<:FM\"=aDmHAbCl@%@%

level 15

manager-user admin

password cipher @%@%/#t."\i!CN:fcaLL.SLY9e%>]n*,Vrv~4DZU.{ &N6r8:e%A9@%@%

service-type web terminal

level 15

role system-admin

role device-admin

role device-admin(monitor)

role audit-admin

bind manager-user audit-admin role audit-admin

bind manager-user admin role system-admin

==================================================================

l2tp-group default-lns

==================================================================

interface GigabitEthernet0/0/0

undo shutdown

ip binding vpn-instance default

ip address 192.168.0.1 255.255.255.0

alias GE0/METH

service-manage http permit

service-manage https permit

service-manage ping permit

service-manage ssh permit

service-manage snmp permit

service-manage telnet permit

interface Virtual-if0

==================================================================

interface NULL0

==================================================================

firewall zone local

set priority 100

==================================================================

firewall zone trust

set priority 85

add interface GigabitEthernet0/0/0

==================================================================

firewall zone untrust

set priority 5

==================================================================

firewall zone dmz

set priority 50

==================================================================

ip route-static 0.0.0.0 0.0.0.0 GigabitEthernet1/0/2 1.1.1.2 track ip-link Linkt

est description 链路故障检测

ip route-static 1.1.1.100 255.255.255.255 NULL0 track ip-link Linktest

ip route-static 1.1.1.105 255.255.255.255 NULL0 track ip-link Linktest

==================================================================

undo ssh server compatible-ssh1x enable

ssh authentication-type default password

ssh server cipher aes256_ctr aes128_ctr

ssh server hmac sha2_256 sha1

ssh client cipher aes256_ctr aes128_ctr

ssh client hmac sha2_256 sha1

==================================================================

firewall detect ftp

==================================================================

nat server FTP zone untrust protocol tcp global 1.1.1.100 ftp inside 10.1.2.1 f

tp no-reverse unr-route

==================================================================

user-interface con 0

authentication-mode aaa

user-interface vty 0 4

authentication-mode aaa

protocol inbound ssh

user-interface vty 16 20

==================================================================

pki realm default

==================================================================

sa

==================================================================

location

==================================================================

nat address-group “Nat pool” 0

mode pat

section 0 1.1.1.105 1.1.1.106

==================================================================

nat address-group “DMZ pool” 1

mode pat

route enable

section 0 10.1.2.100 10.1.2.100

==================================================================

multi-linkif

mode proportion-of-weight

==================================================================

right-manager server-group

==================================================================

device-classification

device-group pc

device-group mobile-terminal

device-group undefined-group

==================================================================

user-manage server-sync tsm

==================================================================

security-policy

rule name FTP

description 外网访问FTP的安全策略

source-zone untrust

destination-zone dmz

service ftp

action permit

==================================================================

auth-policy

==================================================================

traffic-policy

==================================================================

policy-based-route

==================================================================

nat-policy

rule name Nat

source-zone trust

destination-zone untrust

action source-nat address-group “Nat pool”

rule name “DMZ NAT”

source-zone untrust

destination-zone dmz

destination-address address-set FTP_Server

service ftp

action source-nat address-group “DMZ pool”

==================================================================

quota-policy

==================================================================

pcp-policy

==================================================================

dns-transparent-policy

==================================================================

rightm-policy

==================================================================

return

• 1

• 2

• 3

• 4

• 5

• 6

• 7

• 8

• 9

• 10

• 11

• 12

• 13

• 14

• 15

• 16

• 17

• 18

• 19

• 20

• 21

• 22

• 23

• 24

• 25

• 26

• 27

• 28

• 29

• 30

• 31

• 32

• 33

• 34

• 35

• 36

• 37

• 38

• 39

• 40

• 41

• 42

• 43

• 44

• 45

• 46

• 47

• 48

• 49

• 50

• 51

• 52

• 53

• 54

• 55

• 56

• 57

• 58

• 59

• 60

• 61

• 62

• 63

• 64

• 65

• 66

• 67

• 68

• 69

• 70

• 71

• 72

• 73

• 74

• 75

• 76

• 77

• 78

• 79

• 80

• 81

• 82

• 83

• 84

• 85

• 86

• 87

• 88

• 89

• 90

• 91

• 92

• 93

• 94

• 95

• 96

• 97

• 98

• 99

• 100

• 101

• 102

• 103

• 104

• 105

• 106

• 107

• 108

• 109

• 110

• 111

• 112

• 113

• 114

学习分享，共勉

题外话，毕竟我工作多年，深知技术改革和创新的方向，Flutter作为跨平台开发技术、Flutter以其美观、快速、高效、开放等优势迅速俘获人心

开源分享：【大厂前端面试题解析+核心总结学习笔记+真实项目实战+最新讲解视频】

• 52

• 53

• 54

• 55

• 56

• 57

• 58

• 59

• 60

• 61

• 62

• 63

• 64

• 65

• 66

• 67

• 68

• 69

• 70

• 71

• 72

• 73

• 74

• 75

• 76

• 77

• 78

• 79

• 80

• 81

• 82

• 83

• 84

• 85

• 86

• 87

• 88

• 89

• 90

• 91

• 92

• 93

• 94

• 95

• 96

• 97

• 98

• 99

• 100

• 101

• 102

• 103

• 104

• 105

• 106

• 107

• 108

• 109

• 110

• 111

• 112

• 113

• 114

学习分享，共勉

题外话，毕竟我工作多年，深知技术改革和创新的方向，Flutter作为跨平台开发技术、Flutter以其美观、快速、高效、开放等优势迅速俘获人心

开源分享：【大厂前端面试题解析+核心总结学习笔记+真实项目实战+最新讲解视频】

[外链图片转存中…(img-QJw6GcDy-1714844896547)]