F100-A当路由器使用，带宽只有20M-50M

我这个配置，没有打开攻击防范，攻击防范全部选项为空。请您查看 

#

 sysname DFXF

# 

 undo firewall packet-filter enable 

firewall packet-filter default permit

#

 insulate 

# nat address-group 1 10.0.0.28 10.0.0.28 

# 

 firewall statistic system enable

 #

 radius scheme system server-type extended

 # domain system 

# local-user admin password cipher *(\TZSa-)"+-Z;R6XRTEH1!!

 service-type telnet level 3 

# dhcp server ip-pool 189 

 network 192.168.189.0 mask 255.255.255.0 

 gateway-list 192.168.189.254 

 dns-list 59.51.78.211 222.246.129.81 

# acl number 2001 rule 1 permit source 192.168.189.0 0.0.0.255 # interface Aux0 async mode flow # interface Ethernet0/0 speed 100 duplex full flow-control ip address 192.168.189.254 255.255.255.0 # interface Ethernet0/1 flow-control # interface Ethernet0/2 flow-control # interface Ethernet0/3 flow-control # interface Ethernet1/0 # interface Ethernet1/1 # interface Ethernet1/2 speed 100 duplex full flow-control ip address 10.0.0.28 255.255.255.0 nat outbound 2001 address-group 1 # interface NULL0 # firewall zone local set priority 100 # firewall zone trust add interface Ethernet0/0 add interface Ethernet0/3 set priority 85 # firewall zone untrust add interface Ethernet1/0 add interface Ethernet1/2 set priority 5 # firewall zone DMZ set priority 50 # firewall interzone local trust # firewall interzone local untrust # firewall interzone local DMZ # firewall interzone trust untrust # firewall interzone trust DMZ # firewall interzone DMZ untrust # ip route-static 0.0.0.0 0.0.0.0 10.0.0.1 preference 60 # user-interface con 0 user-interface aux 0 user-interface vty 0 4 # return [DFXF]