基础配置:
sysname huaweiFW1
interface GigabitEthernet0/0/1
quit
interface GigabitEthernet0/0/0
quit
firewall zone trust
quit
firewall zone untrust
quit
配置区域访问权限:允许trust与untrust,untrust与local互相访问
policy interzone local untrust inbound
quit
quit
policy interzone trust untrust inbound
quit
quit
policy interzone trust untrust outbound
quit
quit
定义要保护的数据
acl number 3000
quit
配置IKE安全提议
<