V5防火墙

dialer口配置：

interface Dialer1

 nat outbound 2000

 link-protocol ppp

 ppp chap user 00000000000

 ppp chap password  simple xxxxx

 ppp pap local-user 00000000000 password  simple xxxxx

 ip address ppp-negotiate

 dialer user00000000000

 dialer-group 1

 dialer bundle 1

接口加入相关安全域;

zone name Untrust id 4

 priority 5

 import interface Dialer1

 import interface GigabitEthernet0/1

将dialer口绑定到物理接口：

interface GigabitEthernet0/1

 port link-mode route

 description connect-wan

 pppoe-client dial-bundle-number 1

如果没有映射，只是内网上外网，只做一条trust---untrust就可以

interzone source Trust destination Untrust

  rule 0 permit

   source-ip any_address

   destination-ip any_address

   service any_service

   rule enable

如果有端口映射，做untrust---trust策略，实际规则自己填，web下就能做，这里是放通所有

interzone source Untrust destination Trust

  rule 0 permit

   source-ip any_address

   destination-ip any_address

   service any_service

   rule enable

设置缺省路由

 ip route-static 0.0.0.0 0.0.0.0 Dialer1