02 HCIP 防火墙二层应用配置方法（透明墙）

admin

02 HCIP 防火墙二层应用配置方法（透明墙）

1. 配置WEB管理
   
2. <USG6000V1>system-view
   
3. [USG6000V1]sysname fw1
   
4. [fw1]interface gigabitethernet 1/0/0
   
5. [fw1-GigabitEthernet1/0/0]portswitch  //接口转换为二层
   
6. [fw1-GigabitEthernet1/0/0]quit
   
7. [fw1]interface gigabitethernet 1/0/1
   
8. [fw1-GigabitEthernet1/0/1]portswitch
   
9. [fw1-GigabitEthernet1/0/1]quit
   
10. [fw1]firewall zone trust
    
11. [fw1-zone-trust]add interface gigabitethernet 1/0/0
    
12. [fw1-zone-trust]add interface gigabitethernet 1/0/1
    
13. [fw1-zone-trust]quit
    
14. [fw1]display zone
    
15. 2022-11-24 09:26:58.320
    
16. local
    
17. priority is 100
    
18. interface of the zone is (0):
    
19. #
    
20. trust
    
21. priority is 85
    
22. interface of the zone is (3):
    
23.     GigabitEthernet0/0/0
    
24.     GigabitEthernet1/0/0
    
25.     GigabitEthernet1/0/1
    
26. #
    
27. untrust
    
28. priority is 5
    
29. interface of the zone is (0):
    
30. #
    
31. dmz
    
32. priority is 50
    
33. interface of the zone is (0):
    
34. #
    

复制代码