F100-e 透明模式 如何设置外部访问策略

设置完成后，双向全通

# sysname F100-A-pj # firewall packet-filter enable firewall packet-filter default permit # insulate # bridge enable bridge 1 enable # firewall statistic system enable # radius scheme system server-type extended # domain system # local-user admin password simple Admin@1230 local-user h3c password simple h3c level 4 # interface Aux0 async mode flow # interface Ethernet0/0 bridge-set 1 # interface Ethernet0/1 bridge-set 1 # interface Ethernet0/2 bridge-set 1 # interface Ethernet0/3 bridge-set 1 # interface Bridge-template1 ip address 198.24.4.10 255.255.255.0 //管理IP地址 # interface NULL0 # firewall zone local set priority 100 # firewall zone trust add interface Ethernet0/0 add interface Bridge-template1 //这条很重要 set priority 85 # firewall zone untrust add interface Ethernet0/1 add interface Ethernet0/2 add interface Ethernet0/3 set priority 5 # firewall zone DMZ set priority 50 # firewall interzone local trust # firewall interzone local untrust # firewall interzone local DMZ # firewall interzone trust untrust # firewall interzone trust DMZ # firewall interzone DMZ untrust # ip route-static 0.0.0.0 0.0.0.0 198.24.4.1 preference 60 //默认路由，没有它，非本网段将不能telnet或者无法web管理 # user-interface con 0 user-interface aux 0 user-interface vty 0 4 authentication-mode scheme # return