F1000-Ak1030。设备互通也不不通

# version 7.1.064, Ess 9536P2412 # sysname F1000-AK1030 # context Admin id 1 #脑脑 telnet server enable # irf mac-address persistent timer irf auto-update enable undo irf link-delay irf member 1 priority 1 # dhcp enable # dns server 114.114.114.114 dns server 8.8.8.8 # password-recovery enable # vlan 1 # object-group service 4430 0 service tcp destination eq 4430 # object-group service 4445 0 service tcp destination eq 4445 # object-group service 4500 0 service udp destination eq 4500 # object-group service 7070 0 service tcp destination eq 7070 10 service tcp destination eq 5222 # object-group service 8088 0 service tcp destination eq 8088 # object-group service 8999 0 service tcp destination eq 8999 10 service tcp destination eq 7070 20 service tcp destination eq 5222 # dhcp server ip-pool 4 gateway-list 192.168.4.1 network 192.168.4.0 mask 255.255.255.0 dns-list 114.114.114.114 # dhcp server ip-pool 5 gateway-list 192.168.5.1 network 192.168.5.0 mask 255.255.255.0 dns-list 114.114.114.114 # dhcp server ip-pool 6 gateway-list 192.168.6.1 network 192.168.6.0 mask 255.255.255.0 dns-list 114.114.114.114 # dhcp server ip-pool 7 gateway-list 192.168.7.1 network 192.168.7.0 mask 255.255.255.0 dns-list 114.114.114.114 # dhcp server ip-pool 8 gateway-list 192.168.8.1 network 192.168.8.0 mask 255.255.255.0 dns-list 114.114.114.114 # dhcp server ip-pool 9 gateway-list 192.168.9.1 network 192.168.9.0 mask 255.255.255.0 dns-list 114.114.114.114 # dhcp server ip-pool 10 gateway-list 192.168.10.1 network 192.168.10.0 mask 255.255.255.0 dns-list 114.114.114.114 # dhcp server ip-pool 11 gateway-list 192.168.11.1 network 192.168.11.0 mask 255.255.255.0 dns-list 114.114.114.114 # controller Cellular1/0/0 # interface NULL0 # interface Vlan-interface1 ip address 192.168.10.1 255.255.255.0 # interface GigabitEthernet1/0/0 port link-mode route combo enable copper ip address 192.168.0.1 255.255.255.0 # interface GigabitEthernet1/0/1 port link-mode route combo enable fiber # interface GigabitEthernet1/0/3 port link-mode route description GuideWan Interface bandwidth 100000000 ip address 183.134.230.* 255.255.255.252 dns server 114.114.114.114 nat outbound description GuideNat nat server protocol tcp global current-interface 1433 inside 192.168.4.253 1433 rule ServerRule_10 nat server protocol tcp global current-interface 4430 inside 192.168.7.2 443 rule ServerRule_15 nat server protocol tcp global current-interface 4522 inside 192.168.4.253 4522 rule ServerRule_5 nat server protocol tcp global current-interface 4527 inside 192.168.4.253 4527 rule ServerRule_7 nat server protocol tcp global current-interface 5222 inside 192.168.2.240 5222 rule ServerRule_3 nat server protocol tcp global current-interface 7070 inside 192.168.2.240 7070 rule ServerRule_2 nat server protocol tcp global current-interface 8072 inside 192.168.4.253 8072 rule ServerRule_8 nat server protocol tcp global current-interface 8999 inside 192.168.2.240 8999 rule ServerRule_4 nat server protocol tcp global current-interface 9023 inside 192.168.4.253 9023 rule ServerRule_6 nat server protocol tcp global current-interface 11180 inside 192.168.4.253 80 rule ServerRule_12 nat server protocol tcp global current-interface 11520 inside 192.168.4.253 11520 rule ServerRule_11 nat server protocol tcp global current-interface 14417 inside 192.168.4.253 14417 rule ServerRule_9 nat server protocol tcp global current-interface 18080 inside 192.168.2.240 8080 rule ServerRule_1 gateway 183.134.230.* # interface GigabitEthernet1/0/9 port link-mode route ip address 192.168.9.1 255.255.255.0 # interface GigabitEthernet1/0/11 port link-mode route ip address 192.168.11.1 255.255.255.0 # interface GigabitEthernet1/0/2 port link-mode bridge port link-type trunk port trunk permit vlan all # interface GigabitEthernet1/0/4 port link-mode bridge port link-type trunk port trunk permit vlan all # interface GigabitEthernet1/0/5 port link-mode bridge port link-type trunk port trunk permit vlan all # interface GigabitEthernet1/0/6 port link-mode bridge port link-type trunk port trunk permit vlan all # interface GigabitEthernet1/0/7 port link-mode bridge port link-type trunk port trunk permit vlan all # interface GigabitEthernet1/0/8 port link-mode bridge port link-type trunk port trunk permit vlan all # interface GigabitEthernet1/0/10 port link-mode bridge # interface SSLVPN-AC1 ip address 20.20.20.1 255.255.255.0 # security-zone name Local # security-zone name Trust import interface GigabitEthernet1/0/9 import interface GigabitEthernet1/0/11 import interface Vlan-interface1 import interface GigabitEthernet1/0/2 vlan 1 import interface GigabitEthernet1/0/4 vlan 1 import interface GigabitEthernet1/0/5 vlan 1 to 4094 import interface GigabitEthernet1/0/6 vlan 1 import interface GigabitEthernet1/0/7 vlan 1 import interface GigabitEthernet1/0/8 vlan 1 to 4094 attack-defense apply policy 1 # security-zone name DMZ # security-zone name Untrust import interface GigabitEthernet1/0/3 import interface SSLVPN-AC1 # security-zone name Management import interface GigabitEthernet1/0/0 # scheduler logfile size 16 # line class aux user-role network-operator # line class console authentication-mode scheme user-role network-admin # line class vty user-role network-operator # line aux 0 user-role network-admin # line con 0 user-role network-admin # line vty 0 63 authentication-mode scheme user-role network-admin # ssh server enable # arp ip-conflict log prompt # acl advanced 3999 rule 0 permit ip # domain system # domain default enable system # role name level-0 description Predefined level-0 role # role name level-1 description Predefined level-1 role # role name level-2 description Predefined level-2 role # role name level-3 description Predefined level-3 role # role name level-4 description Predefined level-4 role # role name level-5 description Predefined level-5 role # role name level-6 description Predefined level-6 role # role name level-7 description Predefined level-7 role # role name level-8 description Predefined level-8 role # role name level-9 description Predefined level-9 role # role name level-10 description Predefined level-10 role # role name level-11 description Predefined level-11 role # role name level-12 description Predefined level-12 role # role name level-13 description Predefined level-13 role # role name level-14 description Predefined level-14 role # user-group system # local-user admin class manage password hash $h$6$E7aM1P+GeVR+EZ0p$MN7Rstp9yfuLw2YnBW8SA2g+fl8nz+pCJZQD28fzbVaaByclkWvhIttHUTst0jF8r2Mz29Djt6aHzck050uepQ== service-type ssh telnet terminal https authorization-attribute user-role level-15 authorization-attribute user-role network-admin authorization-attribute user-role network-operator # local-user nbar03002 class network password cipher $c$3$Pj4sOe6sm/Xx0BKAkIS7y5MkUgXBmE1YuANZlA== service-type sslvpn authorization-attribute user-role network-operator authorization-attribute sslvpn-policy-group SSLVPNGroup description 原和弘 # local-user nbar03015 class network password cipher $c$3$729fpxp1aoxgpuabYsSjlRYgfF44IThCU/SPHw== service-type sslvpn authorization-attribute user-role network-operator authorization-attribute sslvpn-policy-group SSLVPNGroup description 谭燕红 # local-user nbar03021 class network password cipher $c$3$VYculCVorOgFjtTyyTxtsT6kHxiSYSeac0Jh4Q== service-type sslvpn authorization-attribute user-role network-operator authorization-attribute sslvpn-policy-group SSLVPNGroup description 邬亚芬 # local-user nbar03023 class network password cipher $c$3$yHvPiAMVGvWwk/Qnvhir0pOpvAD1xnxPoqwQQg== service-type sslvpn authorization-attribute user-role network-operator authorization-attribute sslvpn-policy-group SSLVPNGroup description 余世友 # local-user nbar03025 class network password cipher $c$3$0A0Jzr/i5G1ddgfa6Yt40JZEahCkqbw2NspBlA== service-type sslvpn authorization-attribute user-role network-operator authorization-attribute sslvpn-policy-group SSLVPNGroup description 胡珊红 # local-user nbar03026 class network password cipher $c$3$4cdiKhg7dbQFgwEbPHBGTGtOnfaIfPOTOkvNKQ== service-type sslvpn authorization-attribute user-role network-operator authorization-attribute sslvpn-policy-group SSLVPNGroup description 赖飞君 # local-user nbar03031 class network password cipher $c$3$o2V+5fQLmlE+l1mYeb9Y39fIPaQC3u0NEA1nTg== service-type sslvpn authorization-attribute user-role network-operator authorization-attribute sslvpn-policy-group SSLVPNGroup description 周伟红 # local-user nbar03034 class network password cipher $c$3$I0Xj8jy45cW6qDhthmQF+bR0TjxCoZoMrCcikw== service-type sslvpn authorization-attribute user-role network-operator authorization-attribute sslvpn-policy-group SSLVPNGroup description 吴贵东 # local-user nbar03048 class network password cipher $c$3$MNsuI2IPg7DZPaN+mfLD8lw9WJ0wC0I4xXB9+g== service-type sslvpn authorization-attribute user-role network-operator authorization-attribute sslvpn-policy-group SSLVPNGroup description 董伟 # local-user nbar03052 class network password cipher $c$3$JEzXBkv8IjFEPOI8LEhUL2L7HM4vGxNHtrs6vg== service-type sslvpn authorization-attribute user-role network-operator authorization-attribute sslvpn-policy-group SSLVPNGroup description 郭云霞 # local-user nbar03072 class network password cipher $c$3$7OXNQKFhTZhDLTkamdR0LAvP2pD8npndh5vDLw== service-type sslvpn authorization-attribute user-role network-operator authorization-attribute sslvpn-policy-group SSLVPNGroup description 顾利亚 # local-user nbar03088 class network password cipher $c$3$SyO8j48ReieV4ZzRyW54a2hBjsEjc6QRMZsCpw== service-type sslvpn authorization-attribute user-role network-operator authorization-attribute sslvpn-policy-group SSLVPNGroup description 叶海荣 # local-user nbar03091 class network password cipher $c$3$Emn+l3KpQ1cUKQBbR9qLQF/Du1gaq2AKBwFhug== service-type sslvpn authorization-attribute user-role network-operator authorization-attribute sslvpn-policy-group SSLVPNGroup description 武传芬 # local-user nbar03107 class network password cipher $c$3$WOUT/Y5v0wexWW4HewVYDQ5uSzIAKAwPRaINAA== service-type sslvpn authorization-attribute user-role network-operator authorization-attribute sslvpn-policy-group SSLVPNGroup description 邓桂霞 # local-user nbar03131 class network password cipher $c$3$MnVcUJNpZzD+g8/jHVbAmqMQa6LiPVhIzX9Z8g== service-type sslvpn authorization-attribute user-role network-operator authorization-attribute sslvpn-policy-group SSLVPNGroup description 裴永梅 # local-user nbar03133 class network password cipher $c$3$sv+5brxbzmd8gIfhE23t2sDLWZu8Me3Sd8DU9w== service-type sslvpn authorization-attribute user-role network-operator authorization-attribute sslvpn-policy-group SSLVPNGroup description 包小雅 # local-user nbar03139 class network password cipher $c$3$m5/Lnw5gE+3nlZQI/gFnWPu4kltvn3mHMffUdQ== service-type sslvpn authorization-attribute user-role network-operator authorization-attribute sslvpn-policy-group SSLVPNGroup description 张招娣 # local-user nbar03140 class network password cipher $c$3$EK7KsXvri3QbIYtiSI/fL8deH6E/sRuYRlEGGw== service-type sslvpn authorization-attribute user-role network-operator authorization-attribute sslvpn-policy-group SSLVPNGroup description 于瑞红 # local-user nbar03148 class network password cipher $c$3$N2Uk+D9H78FK6iYm0EKR9CI36omdtsatOnFKWg== service-type sslvpn authorization-attribute user-role network-operator authorization-attribute sslvpn-policy-group SSLVPNGroup description 明竹清 # local-user nbar03172 class network password cipher $c$3$lQvWE82gbAiWXW0qXiJU1D3J3d+oRENaBUeaoQ== service-type sslvpn authorization-attribute user-role network-operator authorization-attribute sslvpn-policy-group SSLVPNGroup description 王春梅 # local-user nbar03233 class network password cipher $c$3$KoyaC/Yi1WMTntt5yk+sJDq6MeFNoWof8oBaOg== service-type sslvpn authorization-attribute user-role network-operator authorization-attribute sslvpn-policy-group SSLVPNGroup description 杨海娜 # local-user nbar03316 class network password cipher $c$3$9NFt+Qra/8+HWy5D11B7Y/jPKtFRYfRbgCY7Uw== service-type sslvpn authorization-attribute user-role network-operator authorization-attribute sslvpn-policy-group SSLVPNGroup description 魏琴子 # local-user nbar04229 class network password cipher $c$3$jsy9ibVJOM4YqRz2ow39xoijOZZMgT/0OOoxtQ== service-type sslvpn authorization-attribute user-role network-operator authorization-attribute sslvpn-policy-group SSLVPNGroup description 邓桂霞 # local-user nbar04281 class network password cipher $c$3$vTLPJGerm/C2avVtOE90YRLkLkojNCz+P+VOOQ== service-type sslvpn authorization-attribute user-role network-operator authorization-attribute sslvpn-policy-group SSLVPNGroup description 袁宁博 # local-user nbar05062 class network password cipher $c$3$2IHLFjwwVTbKnUHzZTpkqExPoyx+EFM6twTfFw== service-type sslvpn authorization-attribute user-role network-operator authorization-attribute sslvpn-policy-group SSLVPNGroup description 徐燕娜 # local-user nbar05157 class network password cipher $c$3$BrpAIzjYJRX3HM7w0+wh9J+nM5vcDkh8wjvWYQ== service-type sslvpn authorization-attribute user-role network-operator authorization-attribute sslvpn-policy-group SSLVPNGroup description 李宏仕 # local-user nbar05190 class network password cipher $c$3$VVeDU1sRtcW9p0vVB4K6cjR43HfnRlsqN8YURQ== service-type sslvpn authorization-attribute user-role network-operator authorization-attribute sslvpn-policy-group SSLVPNGroup description 沈邱平 # local-user nbar05192 class network password cipher $c$3$Qj76Ij/PZdQ+N5H/q7W2iWyhzCLDi2Zw4ZFXDA== service-type sslvpn authorization-attribute user-role network-operator authorization-attribute sslvpn-policy-group SSLVPNGroup description 邬芬娣 # local-user nbar06616 class network password cipher $c$3$AvV1mvzgqQnmjsjF2p7PK0H7gTJ5rqmLHFAjLg== service-type sslvpn authorization-attribute user-role network-operator authorization-attribute sslvpn-policy-group SSLVPNGroup description 张婷婷 # local-user nbar08453 class network password cipher $c$3$x+Q7kp0Tn+66NF/ULOZGjgHNe4fNm2sK6ghKLQ== service-type sslvpn authorization-attribute user-role network-operator authorization-attribute sslvpn-policy-group SSLVPNGroup description 胡拓 # local-user nbar08459 class network password cipher $c$3$Voo1pWMLXMEtk57UPAaf/ogu8duXRkwThsvhmw== service-type sslvpn authorization-attribute user-role network-operator authorization-attribute sslvpn-policy-group SSLVPNGroup description 张佩燕 # local-user nbar08533 class network password cipher $c$3$HJ0V6tasqfe5X5FgRoh3/W6X+nDnd1P7RZQ/BA== service-type sslvpn authorization-attribute user-role network-operator authorization-attribute sslvpn-policy-group SSLVPNGroup description 韩进芬 # local-user nbar09002 class network password cipher $c$3$exw2vlmrnhCpXGSDtfUX9qH/6fWJiyLCGLb3Vg== service-type sslvpn authorization-attribute user-role network-operator authorization-attribute sslvpn-policy-group SSLVPNGroup description 徐雪燕 # local-user nbar10247 class network password cipher $c$3$abUC1LlvtVkudp88yqnu+64ASu2RPSA+U1i2DQ== service-type sslvpn authorization-attribute user-role network-operator authorization-attribute sslvpn-policy-group SSLVPNGroup description 王舒婉 # local-user nbar11001 class network password cipher $c$3$Kr8TZpBykSX2HTJUPoos131M8dr2GwHZLgH0Cw== service-type sslvpn authorization-attribute user-role network-operator authorization-attribute sslvpn-policy-group SSLVPNGroup description 韦修志 # local-user nbar12087 class network password cipher $c$3$jU5I0D/qAjwrO/ZIX2xtd8r21nHlNGwX4h9SwQ== service-type sslvpn authorization-attribute user-role network-operator authorization-attribute sslvpn-policy-group SSLVPNGroup description 陈芳芳 # local-user nbar12142 class network password cipher $c$3$1u8zmFnW+ma7XP0mg02BxLgIkZoHYsXs6/CLEg== service-type sslvpn authorization-attribute user-role network-operator authorization-attribute sslvpn-policy-group SSLVPNGroup description 尹花 # local-user nbar14005 class network password cipher $c$3$OVxHXFiSo8gXvDgASqzysXmruY04KAXACacQlQ== service-type sslvpn authorization-attribute user-role network-operator authorization-attribute sslvpn-policy-group SSLVPNGroup description 张瑜 # local-user nbar14264 class network password cipher $c$3$f99jQvwRuYcIVRjixLoQHUjuGcgddyv+ZdUz7g== service-type sslvpn authorization-attribute user-role network-operator authorization-attribute sslvpn-policy-group SSLVPNGroup description 徐小燕 # local-user nbar15042 class network password cipher $c$3$h6xX9lHVAdFlNuRQIDipxTEMk2+VYIabfbX1Ag== service-type sslvpn authorization-attribute user-role network-operator authorization-attribute sslvpn-policy-group SSLVPNGroup description 冯玉婷 # local-user nbar16079 class network password cipher $c$3$/XPSQMJF/9dt7Eh4E/WQaoIwBFkbE69T2JUK7A== service-type sslvpn authorization-attribute user-role network-operator authorization-attribute sslvpn-policy-group SSLVPNGroup description 范乐意 # local-user nbar19433 class network password cipher $c$3$lSCHhHJ+laCDu2NBJTTFZgHXjErTt0YlqJ/RPw== service-type sslvpn authorization-attribute user-role network-operator authorization-attribute sslvpn-policy-group SSLVPNGroup description 陈晶晶 # session statistics enable session top-statistics enable # ipsec logging negotiation enable # nat global-policy rule name GlobalPolicyRule_1 service 4445 source-zone Untrust destination-ip host 183.134.230.* action dnat ip-address 192.168.10.5 local-port 4445 rule name GlobalPolicyRule_3 service 8999 source-zone Untrust destination-ip host 183.134.230.* action dnat ip-address 192.168.10.10 local-port 8999 rule name GlobalPolicyRule_5 service 4430 source-zone Untrust destination-ip host 183.134.230.* action dnat ip-address 192.168.10.5 local-port 4430 rule name GlobalPolicyRule_6 action snat easy-ip # application global statistics enable # apr signature auto-update update schedule daily start-time 02:00:00 tingle 120 # ike logging negotiation enable # ip http port 1330 ip https port 1310 ip https enable # blacklist global enable # attack-defense policy 1 scan detect level medium action drop logging syn-flood detect non-specific syn-flood action logging ack-flood detect non-specific ack-flood action logging syn-ack-flood detect non-specific syn-ack-flood action logging rst-flood detect non-specific rst-flood action logging fin-flood detect non-specific fin-flood action logging udp-flood detect non-specific udp-flood action logging icmp-flood detect non-specific icmp-flood action logging icmpv6-flood detect non-specific icmpv6-flood action logging dns-flood detect non-specific dns-flood action logging http-flood detect non-specific http-flood action logging dns-reply-flood detect non-specific dns-reply-flood action logging sip-flood detect non-specific sip-flood action logging signature detect fragment action drop logging signature detect impossible action drop logging signature detect teardrop action drop logging signature detect tiny-fragment action drop logging signature detect ip-option-abnormal action drop logging signature detect smurf action drop logging signature detect traceroute action drop logging signature detect ping-of-death action drop logging signature detect large-icmp action drop logging signature detect large-icmpv6 action drop logging signature detect tcp-invalid-flags action drop logging signature detect tcp-null-flag action drop logging signature detect tcp-all-flags action drop logging signature detect tcp-syn-fin action drop logging signature detect tcp-fin-only action drop logging signature detect land action drop logging signature detect winnuke action drop logging signature detect udp-bomb action drop logging signature detect snork action drop logging signature detect fraggle action drop logging signature detect ipv6-ext-header-abnormal action drop logging signature detect ipv6-ext-header-exceed action drop logging # app-profile 0_IPv4 ips apply policy guideipspolicy mode protect anti-virus apply policy default mode protect # app-profile 1_IPv4 ips apply policy guideipspolicy mode protect anti-virus apply policy default mode protect # app-profile 2_IPv4 ips apply policy guideipspolicy mode protect anti-virus apply policy default mode protect # app-profile 3_IPv4 ips apply policy guideipspolicy mode protect anti-virus apply policy default mode protect # app-profile 4_IPv4 ips apply policy guideipspolicy mode protect anti-virus apply policy default mode protect # app-profile 5_IPv4 ips apply policy guideipspolicy mode protect anti-virus apply policy default mode protect # loadbalance isp file flash:/lbispinfo_v1.5.tp # traffic-policy rule 1 name GuideWANAccPolicy action qos profile guidewanaccprofile source-zone Trust destination-zone DMZ destination-zone Untrust service ike service ipsec-ah service ipsec-esp service l2tp service nat-t-ipsec rule 2 name GuideAVCPolicy action qos profile guideavcprofile1 source-zone Trust destination-zone DMZ destination-zone Untrust profile name guideavcprofile1 bandwidth downstream guaranteed 70000000 bandwidth downstream maximum 70000000 profile name guidewanaccprofile bandwidth downstream guaranteed 30000000 bandwidth downstream maximum 30000000 # sslvpn ip address-pool SSLVPN地址池 20.20.20.2 20.20.20.254 # sslvpn gateway SSLVPN ip address 183.134.230.* service enable # sslvpn context SSLVPNshili gateway SSLVPN ip-tunnel interface SSLVPN-AC1 ip-tunnel address-pool SSLVPN地址池 mask 255.255.255.0 ip-tunnel dns-server primary 114.114.114.114 ip-route-list 访问内网 include 192.168.2.0 255.255.255.0 include 192.168.4.0 255.255.255.0 include 192.168.5.0 255.255.255.0 include 192.168.6.0 255.255.255.0 policy-group SSLVPNGroup filter ip-tunnel acl 3999 ip-tunnel access-route ip-route-list 访问内网 ip-tunnel address-pool SSLVPN地址池 mask 255.255.255.0 log user-login enable log resource-access enable # user-identity enable # security-policy ip rule 5 name any-any action pass disable counting enable profile 5_IPv4 rule 4 name local-local action pass logging enable counting enable profile 4_IPv4 source-zone Local destination-zone Local rule 3 name trust-trust action pass logging enable counting enable profile 3_IPv4 source-zone Trust destination-zone Trust rule 0 name GuideSecPolicy action pass logging enable counting enable profile 0_IPv4 source-zone Trust destination-zone Local destination-zone Untrust destination-zone Trust rule 1 name Local action pass logging enable counting enable profile 1_IPv4 source-zone Local destination-zone Local destination-zone Trust destination-zone Untrust rule 2 name Untrust action pass logging enable counting enable profile 2_IPv4 source-zone Untrust destination-zone Trust destination-zone Local # ips policy guideipspolicy severity-level critical protect-target WebServer Any protect-target WebServer Other protect-target WebServer WebLogic # anti-virus signature auto-update update schedule daily start-time 02:00:00 tingle 120 # cloud-management server domain opstunnel-seccloud.h3c.com # return

上传一下txt吧，这样没法看。。

我重新发了一个

测试的什么业务