v5防火墙，管理不通

安全策略怎么放通，命令是什么

mac学习到了

配置安全策略 # 配置名称为president-database的安全策略规则，允许总裁办在任意时间通过HTTP协议访问财务数据库服务器，具体配置步骤如下。 [Device] security-policy ip [Device-security-policy-ip] rule name president-database [Device-security-policy-ip-0-president-database] source-zone president [Device-security-policy-ip-0-president-database] destination-zone database [Device-security-policy-ip-0-president-database] source-ip-subnet 192.168.1.0 24 [Device-security-policy-ip-0-president-database] destination-ip-subnet 192.168.0.0 24 [Device-security-policy-ip-0-president-database] service http [Device-security-policy-ip-0-president-database] action pass [Device-security-policy-ip-0-president-database] quit # 配置名称为finance-database的安全策略规则，只允许财务部在工作时间通过HTTP协议访问财务数据库服务器，具体配置步骤如下。 [Device-security-policy-ip] rule name finance-database [Device-security-policy-ip-1-finance-database] source-zone finance [Device-security-policy-ip-1-finance-database] destination-zone database [Device-security-policy-ip-1-finance-database] source-ip-subnet 192.168.2.0 24 [Device-security-policy-ip-1-finance-database] destination-ip-subnet 192.168.0.0 24 [Device-security-policy-ip-1-finance-database] service-port tcp destination eq 80 [Device-security-policy-ip-1-finance-database] action pass [Device-security-policy-ip-1-finance-database] time-range work [Device-security-policy-ip-1-finance-database] quit # 配置名称为market-database的安全策略规则，禁止市场部在任何时间通过HTTP协议访问财务数据库服务器，具体配置步骤如下。 [Device-security-policy-ip] rule name market-database [Device-security-policy-ip-2-market-database] source-zone market [Device-security-policy-ip-2-market-database] destination-zone database [Device-security-policy-ip-2-market-database] source-ip-subnet 192.168.3.0 24 [Device-security-policy-ip-2-market-database] destination-ip-subnet 192.168.0.0 24 [Device-security-policy-ip-2-market-database] service http [Device-security-policy-ip-2-market-database] action drop [Device-security-polic配置安全策略 # 配置名称为president-database的安全策略规则，允许总裁办在任意时间通过HTTP协议访问财务数据库服务器，具体配置步骤如下。 [Device] security-policy ip [Device-security-policy-ip] rule name president-database [Device-security-policy-ip-0-president-database] source-zone president [Device-security-policy-ip-0-president-database] destination-zone database [Device-security-policy-ip-0-president-database] source-ip-subnet 192.168.1.0 24 [Device-security-policy-ip-0-president-database] destination-ip-subnet 192.168.0.0 24 [Device-security-policy-ip-0-president-database] service http [Device-security-policy-ip-0-president-database] action pass [Device-security-policy-ip-0-president-database] quit # 配置名称为finance-database的安全策略规则，只允许财务部在工作时间通过HTTP协议访问财务数据库服务器，具体配置步骤如下。 [Device-security-policy-ip] rule name finance-database [Device-security-policy-ip-1-finance-database] source-zone finance [Device-security-policy-ip-1-finance-database] destination-zone database [Device-security-policy-ip-1-finance-database] source-ip-subnet 192.168.2.0 24 [Device-security-policy-ip-1-finance-database] destination-ip-subnet 192.168.0.0 24 [Device-security-policy-ip-1-finance-database] service-port tcp destination eq 80 [Device-security-policy-ip-1-finance-database] action pass [Device-security-policy-ip-1-finance-database] time-range work [Device-security-policy-ip-1-finance-database] quit # 配置名称为market-database的安全策略规则，禁止市场部在任何时间通过HTTP协议访问财务数据库服务器，具体配置步骤如下。 [Device-security-policy-ip] rule name market-database [Device-security-policy-ip-2-market-database] source-zone market [Device-security-policy-ip-2-market-database] destination-zone database [Device-security-policy-ip-2-market-database] source-ip-subnet 192.168.3.0 24 [Device-security-policy-ip-2-market-database] destination-ip-subnet 192.168.0.0 24 [Device-security-policy-ip-2-market-database] service http [Device-security-policy-ip-2-market-database] action drop [Device-security-policy-ip-2-market-database] quity-ip-2-market-database] quit