防火墙

您好，请知：

关于要访问防火墙上配置的IP，以下是部署要点，请参考：

1、需放通到local域的域间策略，注意Local域可分别作为源和目的。参考命令如下：

[SSL_VPN]acl basic 2000

[SSL_VPN-acl-ipv4-basic-2000]rule 0 permit source any

[SSL_VPN-acl-ipv4-basic-2000]quit

[SSL_VPN]zone-pair security source trust destination local

[SSL_VPN-zone-pair-security-Trust-Local]packet-filter 2000

[SSL_VPN-zone-pair-security-Trust-Local]quit

[SSL_VPN]zone-pair security source local destination trust

[SSL_VPN-zone-pair-security-Local-Trust]packet-filter 2000

[SSL_VPN-zone-pair-security-Local-Trust]quit

[SSL_VPN]zone-pair security source untrust destination local

[SSL_VPN-zone-pair-security-Untrust-Local]packet-filter 2000

[SSL_VPN-zone-pair-security-Untrust-Local]quit

[SSL_VPN]zone-pair security source local destination untrust

[SSL_VPN-zone-pair-security-Local-Untrust]packet-filter 2000

[SSL_VPN-zone-pair-security-Local-Untrust]quit

2、确保防火墙的路由可达。