H3C防火墙必须要有个公网地址吗
必须要有。H3C防火墙必须要有个公网地址。
将防火墙部署在互联网出口，使用固定IP地址线路接入互联网。运营商提供的IP地址为198.76.28.30/30，网关为198.76.28.29，DNS地址为114.114.114.114。初步规划防火墙使用3接口接入运营商，使用4接口连接内部网络，内部网络使用192.168.10.0网段，要求内网终端可以自动获取到地址并可以访问互联网。
绛旓細蹇呴』瑕佹湁銆H3C闃茬伀澧欏繀椤昏鏈変釜鍏綉鍦板潃銆傚皢闃茬伀澧欓儴缃插湪浜掕仈缃戝嚭鍙ｏ紝浣跨敤鍥哄畾IP鍦板潃绾胯矾鎺ュ叆浜掕仈缃戙傝繍钀ュ晢鎻愪緵鐨処P鍦板潃涓198.76.28.30/30锛岀綉鍏充负198.76.28.29锛孌NS鍦板潃涓114.114.114.114銆傚垵姝ヨ鍒掗槻鐏浣跨敤3鎺ュ彛鎺ュ叆杩愯惀鍟嗭紝浣跨敤4鎺ュ彛杩炴帴鍐呴儴缃戠粶锛屽唴閮ㄧ綉缁滀娇鐢192.168.10.0缃戞锛岃姹傚唴缃戠粓绔彲...
绛旓細1銆侀鍏堟垜浠繘鍏H3C闃茬伀澧鐣岄潰锛屾帴鐫杩涘叆WEB灏嗘帴鍙ｆ敼涓轰簩灞傛ā寮忥紝2銆佸湪灏嗕簩灞傛ā寮忕殑鎺ュ彛鍒掑埌Trust瀹夊叏鍩熶腑銆3銆佺偣鍑荤晫闈㈠乏渚у揩鎹疯彍鍗曟爮閲岀殑闃茬伀澧欓夐」銆4銆佽繘琛岄厤缃畨鍏ㄧ瓥鐣ワ紝瀹夊叏绛栫暐閰嶇疆瀹屽鍥俱5銆侀厤缃叾浠栫綉娈靛彧鑳借闂叾涓殑鏈嶅姟鍣ㄣ6銆丏HCP 瑕佸惎鐢 DHCP涓户dhcp-relay锛岃繖鏍烽厤缃氨瀹屾垚浜嗐
绛旓細鐜板湪鎵嬩笂鏈変竴鍙H3CSecpathF100-C-G闃茬伀澧,鍏徃鍋氫竴涓湇鍔″櫒瑕佹眰澶栭儴缃戠粶鍙互閫氳繃闃茬伀澧欒闂埌鏈嶅姟鍣,鏈嶅姟鍣ㄧ殑ip鍦板潃鏄唴缃慖P澶栭儴缃戠粶杩囨潵鐨勬槸鐢典俊鐨刬p:221.231.118.210瀛愮綉鎺╃爜255.25... 鐜板湪鎵嬩笂鏈変竴鍙癏3C Secpath F100-C-G闃茬伀澧,鍏徃鍋氫竴涓湇鍔″櫒瑕佹眰澶栭儴缃戠粶鍙互閫氳繃闃茬伀澧欒闂埌鏈嶅姟鍣,鏈嶅姟鍣ㄧ殑ip鍦板潃鏄唴缃慖P...
绛旓細2锛夐槻鐏鐨凟1/2鎺ュ彛涓篣NTRUST鍖哄煙锛宨p鍦板潃鏄細202.111.0.1/27锛3锛夊唴缃戞湇鍔″櫒瀵瑰缃戝仛涓瀵逛竴鐨勫湴鍧鏄犲皠锛192.168.254.2銆192.168.254.3鍒嗗埆鏄犲皠涓202.111.0.2銆202.111.0.3锛4锛夊唴缃戞湇鍔″櫒璁块棶澶栫綉涓嶅仛闄愬埗锛屽缃戣闂唴缃戝彧鏀鹃氬叕缃戝湴鍧211.101.5.49璁块棶192.168.254.2鐨1433绔彛鍜192....
绛旓細鍗庝笁闃茬伀澧H3CF100閰嶇疆 涓銆佸紑閫氱綉鍙 鐢ㄨ秴绾х粓绔紑閫欸E0/0缃戝彛 锛孏E0/0榛樿涓篗anagement鍙ｏ紝鎵浠ラ厤缃畬IP鍦板潃鍚庯紝鍙互鐩存帴鍜岀數鑴戜簰閫氥傚厛杈撳叆銆圚3C銆塻ystem-view 鍒濆鍖栭厤缃 [H3C]interface GigabitEthernet 0/0 [H3C-GigabitEthernet0/0]ip address 192.168.0.1 255.255.255.0 [H3C-...
绛旓細瀹㈡埛闇瑕灏嗚嚜宸卞叕鍙革紝鎵鏈変汉鐨凪AC鍦板潃鍜孖P鍦板潃缁戝畾锛屾潵绠＄悊鎵鏈変汉鐨勪笂缃戯紝娌℃湁缁忚繃缁戝畾鐨勭數鑴戞棤娉曚笂缃戙傚墠鏈熷伐浣滐紝鍏堝皢鍏徃鎵鏈変汉搴旂敤鐨処P鍦板潃鍜孧AC鍦板潃鍒楀湪涓寮犺〃涓娿倀elnet鐧诲綍闃茬伀澧 浣跨敤SecureCRT锛岀櫥褰H3C闃茬伀澧 杈撳叆鐢ㄥ悕鍜屽瘑鐮侊紝鐧诲綍闃茬伀澧欍俿ystem-view杩涘叆绯荤粺瑙嗗浘銆傞厤缃 IP鍦板潃涓嶮AC鍦板潃缁戝畾 [H3C]...
绛旓細nat address-group 1 211.90.78.144 211.90.78.129 dhcp server ip-pool 123 net work 192.168.33.0 mask 255.255.255.0 gateway-list 192.168.33.1 255.255.255.0 dns-list 192.168.33.1 dhcp server forbidden-ip 192.168.33.1 interface ethernet 0/1 ip address 211.90.78...
绛旓細int e3/0/0 鎺ュ彛鐣岄潰涓嬮厤缃 ip addess 鍦板潃 鎺╃爜 锛沬nt e4/0/0 鎺ュ彛鐣岄潰涓嬮厤缃 ip addess 192.168.2.254 24 绯荤粺瑙嗗浘涓嬮厤缃甶p route-static 0.0.0.0 0.0.0.0 涓嬩竴璺冲湴鍧锛鍏綉缃戝叧鍦板潃锛堿CL number 2001 rule permit source 192.168.2.0 0.0.0.255 杩斿洖鎺ュ彛E4/0/0涓 nat ...
绛旓細鍦ㄥ唴缃戝彛涔熻閰嶇疆涓閬嶏紝杩欐牱灏辨湁杩涙湁鍑猴紝鎵嶅彲浠ュ疄鐜 鍐呯綉涔熷彲浠ョ敤鍙戝竷鐨勫缃鍦板潃璁块棶鍒板唴缃戠殑鏈嶅姟鍣ㄧ殑銆備緥濡傦細interface GigabitEthernet0/1 杩欐槸鍑哄彛绔彛 nat outbound static nat outbound 3000 address-group 1 nat server protocol tcp global 鍏綉IP鍦板潃 澶栫綉璁块棶绔彛鍙 inside 鍐呯綉IP鍦板潃 鍐呯綉璁块棶...
绛旓細闃茬伀澧鐨勬帴鍙鍦板潃鏄192.168.5.255锛 杩欎釜鍦板潃鑳介厤缃緱涓婂幓鍚楋紵 涓嶄細鍚 255鏄箍鎾湴鍧鍟 浣犵數鑴戠殑缃戝叧鍦板潃灏卞簲璇ユ槸闃茬伀澧欑殑鎺ュ彛鍦板潃锛屼綘缃戝叧鎸囧悜鐨勪笉鏄槻鐏鐨勮瘽锛岄偅浣犳庝箞鑳芥甯歌闂缃戝憿锛熶綘瑕佹槸鎯宠鐢佃剳鐨勭綉鍏虫敼涓5.1锛屽悓鏃跺張瑕佽兘姝ｅ父璁块棶鐨勮瘽閭ｄ綘灏辨妸闃茬伀澧欑殑鎺ュ彛鍦板潃鏀逛负5銆1灏卞彲浠ヤ簡鍢 ...
