sysname SecPath1070
#
context Admin id 1
#
ip vpn-instance management
route-distinguisher 1000000000:1
vpn-target 1000000000:1 import-extcommunity
vpn-target 1000000000:1 export-extcommunity
#
telnet rver enable
#
irf mac-address persistent timer
irf auto-update enable
undo irf link-delay
irf member 1 priority 1
#
ip unreachables enable
ip ttl-expires enable
#
dns rver
#
lldp global enable
lldp mode rvice-bridge
#
password-recovery enable
#
vlan 1
#
object-group ip address 集群网段
10 network subnet 10.21.13.0 255.255.255.0
30 network host address 10.21.32.12
40 network host address 10.21.32.13
50 network host address 10.21.32.22
#
object-group ip address 数据备份服务器
description 本地数据备份服务器
0 network host address 10.21.32.16
#
object-group ip address 远端数据备份服务器
0 network subnet 192.168.2.0 255.255.255.0
#
object-group rvice 端口
0 rvice tcp source range xxx destination range xxx
#
policy-bad-route gzxj permit node 5
if-match acl 3004
apply next-hop X.X.X.X
#
policy-bad-route gzxj permit node 10
if-match acl 2002
apply next-hop X.X.X.X
#
policy-bad-route gzxj permit node 20
if-match acl 2001
apply next-hop X.X.X.X
人教版七年级下册英语
#
policy-bad-route test permit node 10
if-match acl 3001
apply next-hop X.X.X.X
#
interface NULL0
#
interface GigabitEthernet1/0/0
port link-mode route
#
interface GigabitEthernet1/0/1
port link-mode route
ip address X.X.X.X 255.255.255.0
ip last-hop hold
nat outbound 3000
nat rver protocol tcp global X.X.X.X 20 inside 10.21.32.248 20
ipc apply policy GE1/0/1
#
interface GigabitEthernet1/0/2
port link-mode route
bandwidth 100000
ip address X.X.X.X 255.255.255.248
ip last-hop hold
nat outbound 3000
nat rver protocol tcp global X.X.X.X 20 inside 10.21.32.248 20
#
interface GigabitEthernet1/0/3
port link-mode route
#
interface GigabitEthernet1/0/4
port link-mode route
#
interface GigabitEthernet1/0/5
port link-mode route
#
interface GigabitEthernet1/0/6
port link-mode route
#
interface GigabitEthernet1/0/7
port link-mode route
#
interface GigabitEthernet1/0/8
port link-mode route
#
interface GigabitEthernet1/0/9
port link-mode route
#
interface GigabitEthernet1/0/10
port link-mode routeanyway是什么意思
#
interface GigabitEthernet1/0/11
port link-mode route
#
interface GigabitEthernet1/0/12
port link-mode route
#
interface GigabitEthernet1/0/13
port link-mode route
#
interface GigabitEthernet1/0/14
port link-mode route
#
interface GigabitEthernet1/0/15
port link-mode route
duplex full
#
interface GigabitEthernet1/0/16
port link-mode route
#
interface GigabitEthernet1/0/17
port link-mode route
#
interface GigabitEthernet1/0/18
port link-mode route
#
interface GigabitEthernet1/0/19
port link-mode route
#
interface GigabitEthernet1/0/20
port link-mode route
#
初中英语教学视频interface GigabitEthernet1/0/21
port link-mode route
#
interface GigabitEthernet1/0/22
port link-mode route
上海世博会会徽图案
#
interface GigabitEthernet1/0/23
port link-mode route
#
interface Ten-GigabitEthernet1/0/25
port link-mode route
description -内网10.21.1.1
ip address 10.21.1.2 255.255.255.252
nat hairpin enable
ip policy-bad-route gzxj
#
interface Ten-GigabitEthernet1/0/24
port link-mode bridge
port link-type trunk
undo port trunk permit vlan 1
#
object-policy ip DMZ-Any
rule 0 pass
#
object-policy ip Local-Local
rule 0 pass logging
#
object-policy ip Local-Trust
rule 0 pass logging
#
object-policy ip Local-Untrust
rule 0 pass logging
#
object-policy ip Trust-Local
rule 0 pass logging
#
object-policy ip Trust-Trust
rule 0 pass logging
#
object-policy ip Trust-Untrust
rule 0 pass logging counting
#
object-policy ip Untrust-Local
rule 0 pass logging counting
#
object-policy ip Untrust-Trust
rule 0 pass logging counting
#
object-policy ip Untrust-Untrust
rule 0 pass logging
#
curity-zone name Local
#
curity-zone name Trust
import interface GigabitEthernet1/0/9
import interface GigabitEthernet1/0/14
import interface Ten-GigabitEthernet1/0/25
#
curity-zone name DMZ
attack-defen apply policy dmz
#
curity-zone name Untrust
import interface GigabitEthernet1/0/1
import interface GigabitEthernet1/0/2
import interface GigabitEthernet1/0/15
#
curity-zone name Management
import interface GigabitEthernet1/0/0
#
zone-pair curity source Local destination Local
object-policy apply ip Local-Local
#
zone-pair curity source Local destination Trust
fearful是什么意思
object-policy apply ip Local-Trust
#
zone-pair curity source Local destination Untrust
object-policy apply ip Local-Untrust
#
zone-pair curity source Trust destination Local
object-policy apply ip Trust-Local
#
zone-pair curity source Trust destination Trust
object-policy apply ip Trust-Trust
#
zone-pair curity source Trust destination Untrust
object-policy apply ip Trust-Untrust
#
zone-pair curity source Untrust destination Local
object-policy apply ip Untrust-Local
#
zone-pair curity source Untrust destination Trust
object-policy apply ip Untrust-Trust
#
zone-pair curity source Untrust destination Untrust
object-policy apply ip Untrust-Untrust
#
scheduler logfile size 16
#
line class aux
ur-role network-operator
#
line class console
ur-role network-admin
#
line class vty
ur-role network-operator
#
line aux 0
ur-role network-admin
#
line con 0
authentication-mode scheme
ur-role network-admin
#
line vty 0 63
authentication-mode scheme
ur-role network-admin
#
ip route-static 外网
ip route-static 内网
#
info-center synchronous
info-center loghost 10.21.32.13
#
snmp-agent
snmp-agent local-engineid 800063A28084D931FF850000000001
snmp-agent community
write private
snmp-agent community read public
snmp-agent sys-info version all
#
ssh rver enable
the who#
time-range Worktime 08:00 to 18:00 working-day
#
acl basic 2000
rule 0 permit source 10.21.0.0 0.0.255.255
rule 1 deny
#
acl basic 2001
rule 0 permit source 10.21.11.0 0.0.0.255
rule 1 permit source 10.21.12.0 0.0.0.255
rule 2 permit source 10.21.13.0 0.0.0.255
rule 4 permit source 10.21.22.0 0.0.0.255
rule 5 permit source 10.21.23.0 0.0.0.255
rule 10 deny
#
acl basic 2002
rule 10 permit source 10.21.31.0 0.0.0.255
rule 20 permit source 10.21.32.0 0.0.0.255
#
acl basic 2003
rule 10 permit source 10.21.32.15 0
rule 15 permit source 10.21.31.15 0
rule 20 permit source 10.21.32.22 0
rule 25 permit source 10.21.31.22 0
#
acl advanced 3000
rule 1 deny ip source 10.21.32.0 0.0.0.255 destination 92.168.13.0 0.0.0.255
rule 2 permit ip source 10.21.32.0 0.0.0.255
rule 3 permit ip source 10.21.11.0 0.0.0.255
rule 4 permit ip source 10.21.12.0 0.0.0.255
rule 5 permit ip source 10.21.13.0 0.0.0.255
rule 6 permit ip source 10.21.22.0 0.0.0.255
rule 7 permit ip source 10.21.23.0 0.0.0.255
rule 8 permit ip source 10.21.31.0 0.0.0.255
rule 9 permit ip source 10.21.1.0 0.0.0.3
rule 20 deny ip
#
acl advanced 3001
rule 0 permit ip source 10.21.11.0 0.0.0.255
rule 1 permit ip source 10.21.12.0 0.0.0.255
rule 2 permit ip source 10.21.13.0 0.0.0.255
rule 3 permit ip source 10.21.22.0 0.0.0.255
rule 4 permit ip source 10.21.23.0 0.0.0.255
rule 10 deny ip
#
acl advanced 3002
rule 10 permit tcp source 10.21.32.248 0 source-port eq www destination-port eq www
#
acl advanced 3003
rule 10 deny ip source 10.21.13.0 0.0.0.255 destination 10.0.0.0 0.0.255.255
wto是什么意思
rule 20 permit ip
#
acl advanced 3004
rule 1 permit ip source 10.21.32.22 0
rule 2 permit ip source 10.21.32.24 0
sinna
rule 3 permit ip source 10.21.32.25 0
rule 10 deny ip
#
acl advanced 3200
description -内网10.21.1.1
rule 0 permit ip source 10.21.32.0 0.0.0.255 destination 192.168.13.0 0.0.0.255
rule 10 deny ip
#
domain system
#
aaa ssion-limit ftp 16
aaa ssion-limit telnet 16
aaa ssion-limit ssh 16
domain default enable system
#
role name level-0
description Predefined level-0 role
#
role name level-1
description Predefined level-1 role
#
role name level-2
description Predefined level-2 role
#
role name level-3
description Predefined level-3 role
#
role name level-4
description Predefined level-4 role
#
role name level-5
description Predefined level-5 role
#
role name level-6
description Predefined level-6 role
#
role name level-7
description Predefined level-7 role
#
role name level-8
description Predefined level-8 role
#
role name level-9
description Predefined level-9 role
#
role name level-10
description Predefined level-10 role
#
role name level-11
description Predefined level-11 role
#
role name level-12
description Predefin
ed level-12 role
#direction是什么意思
role name level-13
description Predefined level-13 role
#
role name level-14
description Predefined level-14 role
#
ur-group system
#
local-ur XXX class manage
password XXXXXXX
rvice-type ssh telnet terminal https
authorization-attribute ur-role level-3
authorization-attribute ur-role network-admin
authorization-attribute ur-role network-operator
password-control login-attempt 5 exceed lock-time 30
#
ssion statistics enable
#
undo ipc anti-replay check
undo ipc decrypt-check enable
#
ipc transform-t GE1/0/1_IPv4_10
esp encryption-algorithm des-cbc
esp authentication-algorithm md5
#
ipc policy GE1/0/1 10 isakmp
transform-t GE1/0/1_IPv4_10
curity acl 3200
local-address
fromnowon
remote-address
ike-profile GE1/0/1_IPv4_10
sa duration time-bad 28800
#
apr signature auto-update
update schedule daily start-time 03:01:00 tingle 120
#
ike identity address 222.85.178.192
#
ike profile GE1/0/1_IPv4_10
keychain GE1/0/1_IPv4_10
local-identity address
match remote identity address
match local address GigabitEthernet1/0/1
proposal 65535
#
ike proposal 65535
dh group2
authentication-algorithm md5
description GE1/0/1_IPv4_10
#
ike keychain GE1/0/1_IPv4_10
match local address GigabitEthernet1/0/1
pre-shared-key address
#
ip http port 81
ip https port 81
ip https enable
#
attack-defen policy dmz
scan detect level low action logging
#
url-filter signature auto-update
update schedule daily start-time 02:00:00 tingle 120
#
ips signature auto-update
update schedule weekly sat start-time 02:00:00 tingle 120
#
app-profile 5_3_0_IPv4
anti-virus apply policy default mode protect
#
inspect block-source parameter-profile ips_block_default_parameter
#
inspect capture parameter-profile ips_capture_default_parameter
#
inspect logging parameter-profile ips_logging_default_parameter
#
inspect redirect parameter-profile av_redirect_default_parameter
#
inspect redirect parameter-profile ips_redirect_default_parameter
#
inspect redirect parameter-profile url_redirect_default_parameter
#
loadbalance action ##defaultactionforllbipv4##%%autocreatedbyweb%% type link-generic
forward all
#
loadbalance policy ##defaultpolicyforllbipv4##%%autocreatedbyweb%% type link-generic
default-class action ##defaultactionforllbipv4##%%autocreatedbyweb%%
#
virtual-rver ##defaultvsforllbipv4##%%autocreatedbyweb%% type link-ip
virtual ip address 0.0.0.0 0
lb-policy ##defaultpolicyforllbipv4##%%autocreatedbyweb%%
#
loadbalance isp file lbispinfo_v1.5.tp
#
traffic-policy
rule name DataBackupXS-to-GY
time-range Worktime
action qos profile 数据备份
source-address address-t 数据备份服务器
destination-address address-t 数据备份服务器
source-zone Untrust
destination-zone Trust
rule name DataBackupGY-to-XS
time-range Worktime
action qos profile 数
据备份
source-address address-t 数据备份服务器
destination-address address-t 数据备份服务器
source-zone Trust
destination-zone Untrust
profile name 数据备份
bandwidth downstream maximum 30000
bandwidth upstream maximum 30000
traffic-priority 3
#
ips policy default
#
anti-virus policy default
#
anti-virus signature auto-update
update schedule daily start-time 03:01:00 tingle 120
#
return
