NS-SecPath F100-C-G

1、一台搁置未用的NS-SecPath F100-C-G，需要查看已有配置并离线配置好，代替现有防火墙

2、配置如下：

<H3C>

#Nov  4 10:46:25:244 2019 H3C SHELL/4/LOGIN:

 Trap 1.3.6.1.4.1.25506.2.2.1.1.3.0.1<hh3cLogIn>: login from Console

%Nov  4 10:46:25:244 2019 H3C SHELL/5/SHELL_LOGIN: Console logged in from con0.

<H3C>sys

System View: return to User View with Ctrl+Z.

[H3C]di cur

#

 version 5.20, Release 5142P02

#

 sysname H3C

#

 undo voice vlan mac-address 00e0-bb00-0000

#

 domain default enable system

#

 port-security enable

#

 undo alg dns

 undo alg rtsp

 undo alg h323

 undo alg sip

 undo alg sqlnet

 undo alg pptp

 undo alg ils

 undo alg nbt

 undo alg msn

 undo alg qq

 undo alg tftp

 undo alg sccp

 undo alg gtp  

#              

session synchronization enable

#              

 password-recovery enable

#              

vlan 1         

#              

domain system  

 access-limit disable

 state active  

 idle-cut disable

 self-service-url disable

#              

pki domain default

  crl check disable

#              

user-group system

 group-attribute allow-guest

#               

local-user admin

 password cipher $c$3$W8CMTtDj5vcSuLQoMsS+iaarhnHQhios

 authorization-attribute level 3

 service-type telnet

 service-type web

#              

cwmp           

 undo cwmp enable

#              

interface NULL0

#              

interface GigabitEthernet0/0

 port link-mode route

 ip address 192.168.0.1 255.255.255.0

#              

interface GigabitEthernet0/1

 port link-mode route

#              

interface GigabitEthernet0/2

 port link-mode route

#               

interface GigabitEthernet0/3

 port link-mode route

#              

interface GigabitEthernet0/4

 port link-mode route

#              

vd Root id 1   

#              

zone name Management id 0

 priority 100  

 import interface GigabitEthernet0/0

zone name Local id 1

 priority 100  

zone name Trust id 2

 priority 85   

zone name DMZ id 3

 priority 50   

zone name Untrust id 4

 priority 5    

switchto vd Root

 zone name Management id 0

 ip virtual-reassembly

 zone name Local id 1

 ip virtual-reassembly

 zone name Trust id 2

 ip virtual-reassembly

 zone name DMZ id 3

 ip virtual-reassembly

 zone name Untrust id 4

 ip virtual-reassembly

#              

 load xml-configuration

#              

 load tr069-configuration

#               

user-interface con 0

user-interface vty 0 4

 authentication-mode scheme

#              

return         

[H3C]

console口登录查看配置，笔记本配置192.168.0.22 网线直连G0/0口，无法ping通 G0/0口 192.168.0.1 且无法web页面登录管理