H3C SECPATH F1000-S

# sysname h3c # Firewall packet-filter enble Firewall packet-filter deafult permit # Nat address-group 1 公网IP 公网IP Nat dns-map www.公司域名 192.168.10.226 80 # Bridge enable # Firewall statistic system enable # Dns server 61.128.128.68 # Ip http acl 2000 # Ip http shutdown # Raidius scheme system server-type extended # Domain system # Local-user root Password simple admin Service-type terminal Level 3 # Dhcp server ip-pool 10 network 192.168.10.0 mask 255.255.255.0 gateway-list 192.168.10.254 dns-list 61.128.128.68 # Dhcp server ip-pool 11 network 192.168.11.0 mask 255.255.255.0 gateway-list 192.168.11.254 dns-list 61.128.128.68 # Dhcp server ip-pool 12 network 192.168.120.0 mask 255.255.255.0 gateway-list 192.168.120.254 dns-list 61.128.128.68 # Dhcp server ip-pool 14 network 192.168.14.0 mask 255.255.255.0 gateway-list 192.168.14.254 dns-list 61.128.128.68 # Dhcp server ip-pool 15 network 192.168.15.0 mask 255.255.255.0 gateway-list 192.168.15.254 dns-list 61.128.128.68 # Acl number 2000 rule 2 permit # Acl number 3000 rule 0 permit ip source 0.0.0.0 0 destination 192.168.10.226 0 # Acl number 3001 rule 0 permit ip source 192.168.0.0 0.0.255.255 destination 192.168.10.226 0 # Interface aux 0 async mode flow # Interface Gigabitethernet0/0 # Interface Gigabitethernet0/0.1 address 192.168.10.254 255.255.255.0 vlan-type dot1q vid 10 nat outbound 3001 # Interface Gigabitethernet0/0.11 address 192.168.11.254 255.255.255.0 vlan-type dot1q vid 11 # Interface Gigabitethernet0/0.12 address 192.168.120.254 255.255.255.0 vlan-type dot1q vid 12 # Interface Gigabitethernet0/0.14 address 192.168.14.254 255.255.255.0 vlan-type dot1q vid 14 # Interface Gigabitethernet0/0.15 address 192.168.15.254 255.255.255.252 vlan-type dot1q vid 15 # Interface Gigabitethernet0/1 address 公网IP 255.255.255.0 nat outbound 3000 nat outbound 2000 address-group 1 nat server protocol tcp global 222.179.7.2 www inside 192.168.10.226 www # Interface Gigabitethernet1/0 address 192.168.1.1 255.255.255.0 # Interface Gigabitethernet1/1 # Interface encrypty2/0 # Interface NULL0 # Firewall zone local set priority 100 # Firewall zone trust add interface Gigaethernet0/0 add interface Gigaethernet1/0 add interface Gigaethernet0/0.1 add interface Gigaethernet0/0.11 add interface Gigaethernet0/0.12 add interface Gigaethernet0/0.14 add interface Gigaethernet0/0.15 set priority 85 # Firewall zone untrust add interface Gigaethernet0/1 add interface Gigaethernet1/1 set priority 5 # Firewall zone dmz set priority 50 # Firewall interzone local trust # Firewall interzone local untrust # Firewall interzone local dmz # Firewall interzone trust untrust # Firewall interzone trust dmz # Firewall interzone dmz untrust # Ip route-static 0.0.0.0 0.0.0.0 222.179.7.1 prefrence 60 # Return #