怎么退出华为防火墙的双机热备？只找到hrp enable，没有关闭hrp服务命令 华为透明防火墙的HRP怎么做
\u9632\u706b\u5899\u53cc\u51fb\u70ed\u5907\u534e\u4e3a\u548ccisco\u7684\u533a\u522b\u4f60\u597d\uff01 \u76ee\u524d\u4e3b\u8981\u6709cisco \u7684GNS3\u80fd\u6a21\u62dfcisco PIX\u9632\u706b\u5899\u548cASA\u9632\u706b\u5899 \u81f3\u4e8e\u534e\u4e3a\u7684\uff0c\u6682\u65f6\u5c31\u6ca1\u6709\u9632\u706b\u5899\u7684\u6a21\u62df\u5668\uff0c\u8def\u7531\u4ea4\u6362\u6709eNSP
\u914d\u7f6e\u601d\u8def
1. USG\u63a5\u53e3GigabitEthernet 0/0/1\u548cGigabitEthernet 0/0/2\u5747\u5de5\u4f5c\u5728\u4ea4\u6362\u6a21\u5f0f\uff0c\u5206\u522b\u52a0\u5165\u4e0d\u540c\u7684\u5b89\u5168\u533a\u57df\u3002
2. \u5728USG\u4e0a\u521b\u5efaVLANif\u63a5\u53e3\uff0c\u914d\u7f6e\u7ba1\u7406ip\u5730\u5740\u4e3a192.168.0.1\u3002
3. \u5728USG\u4e0a\u914d\u7f6e\u5230\u8def\u7531\u5668\u7684\u9ed8\u8ba4\u8def\u7531\u3002
4. \u5728 USG\u4e0a\u914d\u7f6eTrust\u533a\u57df\u548cUntrust\u533a\u57df\u7684\u57df\u95f4\u5305\u8fc7\u6ee4\u89c4\u5219\u3002
\u64cd\u4f5c\u6b65\u9aa4
1. \u5728USG\u4e0a\u5b8c\u6210\u4ee5\u4e0b\u57fa\u672c\u914d\u7f6e\u3002
# \u914d\u7f6eGigabitEthernet 0/0/1\u5de5\u4f5c\u5728\u4ea4\u6362\u6a21\u5f0f\u3002
system-view
[USG_A] interface GigabitEthernet 0/0/1
[USG_A-GigabitEthernet0/0/1] portswitch
[USG_A-GigabitEthernet0/0/1] quit
# \u914d\u7f6eGigabitEthernet 0/0/1\u52a0\u5165Trust\u533a\u57df\u3002
[USG_A] firewall zone trust
[USG_A-zone-trust] add interface GigabitEthernet 0/0/1
[USG_A-zone-trust] quit
# \u914d\u7f6eGigabitEthernet 0/0/2\u5de5\u4f5c\u5728\u4ea4\u6362\u6a21\u5f0f\u3002
[USG_A] interface GigabitEthernet 0/0/2
[USG_A-GigabitEthernet0/0/2] portswitch
[USG_A-GigabitEthernet0/0/2] quit
# \u914d\u7f6eGigabitEthernet 0/0/2\u52a0\u5165Untrust\u533a\u57df\u3002
[USG_A] firewall zone untrust
[USG_A-zone-untrust] add interface GigabitEthernet 0/0/2
[USG_A-zone-untrust] quit
2.# \u914d\u7f6eUSG\u7684\u7ba1\u7406IP\u5730\u5740\u3002
[USG_A] interface vlianif 1
[USG_A-GigabitEthernet0/0/1] ip address 192.168.0.2 24
[USG_A-GigabitEthernet0/0/1] quit
[USG_A] firewall zone untrust
[USG_A-zone-untrust] add interface vlanif 1
3.# \u914d\u7f6eUSG\u5230\u8def\u7531\u5668\u7684\u9ed8\u8ba4\u8def\u7531\u3002
[USG_A] ip route-static 0.0.0.0 0.0.0.0 192.168.0.1
4.# \u9ed8\u8ba4\u653e\u5f00\u6240\u6709\u533a\u57df\u4e4b\u95f4\u5305\u8fc7\u6ee4\u3002
[USG_A]firewall packet-filter default permit all
华为多数命令取消都是在前面加 undo
绛旓細undo hrp enable 鍗庝负澶氭暟鍛戒护鍙栨秷閮芥槸鍦ㄥ墠闈㈠姞 undo
绛旓細鍗庝负闃茬伀澧鍙屽嚮鐑涓诲妯″紡蹇冭烦绾挎柇浜嗭紝鍒嗚浜嗭紝鍑虹幇鍙岀粍鐩存帴鍏抽棴闃茬伀澧锛屽啀閲嶆柊寮鍚
绛旓細閲嶅惎鍚庝笉浼氫涪澶辨暟鎹鍗庝负闃茬伀澧閫氳繃缁勫缓鍙屾満鐑绯荤粺鏉ョ‘淇濇暟鎹殑瀹夊叏鎬у拰鍙潬鎬с傝繖绉嶉厤缃笅锛屼竴鍙伴槻鐏鏁呴殰鏃讹紝鍙︿竴鍙伴槻鐏鑳藉鎺ユ浛鍏跺伐浣滐紝浠ヤ繚璇佺綉缁滅殑姝ｅ父杩愯銆傚綋鍏朵腑涓鍙伴槻鐏鍙戠敓閲嶅惎鏃讹紝鍦ㄥ弻鏈虹儹澶囩郴缁熺殑鏀寔涓嬶紝骞朵笉浼氬鑷存暟鎹涪澶便
绛旓細閮藉彲浠ュ疄鐜板弻鏈虹儹澶 浣嗕綘瑕佹煡涓涓嬩綘鐨勮澶囪鏄庝功鏄惁鏀寔hsrp 鎴杤rrp鍗忚 浜ゆ崲鏈轰竴鑸涓夊眰浜ゆ崲鎵嶅彲浠
绛旓細鏄繖鏍风殑锛鍙屾満鐑姝ｅ父浣跨敤鐨勬椂鍊欙紝鍙湁涓涓牳蹇冨湪杩涜鏁版嵁浜ゆ崲锛岃屽彟澶栦竴鍙版牳蹇冨彧鏄湪绾匡紝鑰屼笉浜ゆ崲鏁版嵁銆備絾鏄疺RRP鍙互鐩稿簲鐨勯厤缃悎鐞嗙殑鐢ㄤ袱鍙版牳蹇冭繘琛岃礋杞藉垎鎷呫傛瘮濡傚浜庝竴涓猇RRP澶囦唤缁勪綘鍗楁ゼ鐨勬槸涓伙紝浣嗘槸瀵逛簬浣犲彟澶栦竴涓猇RRP澶囦唤缁勶紝浣犲寳妤肩殑
绛旓細鍗庝负闃茬伀澧閰嶇疆鍛戒护锛氬缓绔婦HCP鍦板潃姹0[Quidway] dhcp server ip-pool 0锛涢厤缃瓺HCP缃戞 [Quidway-dhcp0] network 192.168.8.0 mask 255.255.255.0 锛涢厤缃瓺NS搴忓垪 [Quidway-dhcp0] dns-list ip-address1 [ ip-address2 ... ip-address8 ]锛涢厤缃粯璁ょ綉鍏冲簭鍒 [Quidway-dhcp0] gateway-list ip-...
绛旓細閮藉彲浠ュ疄鐜鍙屾満鐑浣嗕綘瑕佹煡涓涓嬩綘鐨勮澶囪鏄庝功鏄惁鏀寔hsrp鎴杤rrp鍗忚浜ゆ崲鏈轰竴鑸涓夊眰浜ゆ崲鎵嶅彲浠
绛旓細鍗庝负闃茬伀澧欏弻鏈虹儹澶璐熻浇鍒嗘媴浠ュ悗鍗￠】鍘熷洜锛1銆佽矾鐢卞皻鏈敹鏁涳紝鎴栬呬細璇濊〃澶囦唤涓嶅畬鏁淬2銆佷氦鎹㈡満鏁存満鏁呴殰鍚庯紝鍦ㄩ噸鏂板惎鍔ㄧ殑杩囩▼涓紝鎺ュ彛鍙兘鍙嶅Up/Down銆
绛旓細缃戠粶瀹夊叏鏄鍗庝负璁よ瘉涓殑涓涓柟鍚戯紝鍗庝负缃戠粶瀹夊叏璁よ瘉浣撶郴涓富瑕佹湁hcia-Security銆丠CIP-Security銆丠CIE-Security涓変釜绛夌骇銆侶CIA-Security锛欻CIA-Security闇瑕佹帉鎻′俊鎭畨鍏ㄦ蹇点侀槻鐏NAT鎶鏈闃茬伀澧欏弻鏈虹儹澶鎶鏈佷俊鎭畨鍏ㄦ爣鍑嗕笌瑙勮寖銆佸叆渚甸槻寰℃妧绛夌煡璇嗐侶CIP-Security锛欻CIP-Security闇瑕佹帉鎻￠槻鐏楂樺彲闈犳с佺綉缁...
绛旓細浣滀负澶у瀷缃戠粶鐨勫嚭鍙ｈ澶囷紝蹇呴』淇濊瘉缃戠粶鐨勯珮鍙敤鎬э紝娑堥櫎鍗曠偣鏁呴殰銆闃茬伀澧欏弻鏈虹儹澶闄や簡鏀寔ACTIVE/STANDBY鏂瑰紡澶栬繕鏀寔ACTIVE/ACTIVE鐨勬柟寮忥紝鎻愰珮闃茬伀澧欏埄鐢ㄧ巼锛屽疄鐜伴槻鐏鎬ц兘鐨勫彔鍔犮傚畬缇庢敮鎸佸姩鎬佽矾鐢卞崗璁 閽堝澶у瀷澶嶆潅缃戠粶锛屽姩鎬佽矾鐢辨敮鎸佹垚涓虹粍缃戠殑鍏抽敭銆傞槻鐏鏀寔RIP/BGP/OSPF鍔ㄦ佽矾鐢卞崗璁紝浣垮鏉傜綉缁滅畝鍗曞寲銆傚彲...
