e300]
[e300]dis cur
#
acl number 3000
rule 0 permit ip source 192.168.2.0 0.0.0.255
rule 1 permit icmp
#
sysname e300
#
firewall packet-filter default permit interzone local trust direction inbound
firewall packet-filter default permit interzone local trust direction outbound
firewall packet-filter default permit interzone local untrust direction inbound
firewall packet-filter default permit interzone local untrust direction outbound
firewall packet-filter default permit interzone local dmz direction inbound
firewall packet-filter default permit interzone local dmz direction outbound
firewall packet-filter default permit interzone trust untrust direction inbound
firewall packet-filter default permit interzone trust untrust direction outbound
firewall packet-filter default permit interzone trust dmz direction inbound
firewall packet-filter default permit interzone trust dmz direction outbound
firewall packet-filter default permit interzone dmz untrust direction inbound
firewall packet-filter default permit interzone dmz untrust direction outbound
#
nat address-group 0 60.28.50.242 60.28.50.242
nat server global 60.28.50.243 inside 192.168.2.1
nat server global 60.28.50.244 inside 192.168.2.2
nat server global 60.28.50.245 inside 192.168.2.3
nat server global 60.28.50.246 inside 192.168.2.4
nat server global 60.28.50.247 inside 192.168.2.5
nat server global 60.28.50.248 inside 192.168.2.6
nat server global 60.28.50.249 inside 192.168.2.7
nat server global 60.28.50.250 inside 192.168.2.8
nat server global 60.28.50.251 inside 192.168.2.9
nat server global 60.28.50.252 inside 192.168.2.10
#
bypass switch-back auto
#
firewall mode route
#
firewall defend land enable
firewall defend smurf enable
firewall defend fraggle enable
firewall defend winnuke enable
firewall defend syn-flood enable
firewall defend icmp-flood enable
firewall defend icmp-redirect enable
firewall defend source-route enable
firewall defend ping-of-death enable
firewall defend teardrop enable
firewall defend tcp-flag enable
firewall defend ip-fragment enable
#
firewall statistic system enable
#
interface Aux0
async mode flow
link-protocol ppp
#
interface Ethernet0/0/0
ip address 60.28.50.242 255.255.255.248
#
interface Ethernet0/0/1
ip address 192.168.2.254 255.255.255.0
#
interface Ethernet1/0/0
#
interface Ethernet1/0/1
#
interface NULL0
#
firewall zone local
set priority 100
#
firewall zone trust
set priority 85
add interface Ethernet0/0/1
#
firewall zone untrust
set priority 5
add interface Ethernet0/0/0
#
firewall zone dmz
set priority 50
#
firewall interzone local trust
#
firewall interzone local untrust
#
firewall interzone local dmz
#
firewall interzone trust untrust
nat outbound 3000 address-group 0
#
firewall interzone trust dmz
#
firewall interzone dmz untrust
#
aaa
authentication-scheme default
#
authorization-scheme default
#
accounting-scheme default
#
domain default
#
#
ip route-static 0.0.0.0 0.0.0.0 60.28.50.241
#
user-interface con 0
user-interface aux 0
authentication-mode none
user-interface vty 0 4
#
return
[e300]
[e300]dis cur
#
acl number 3000
rule 0 permit ip source 192.168.2.0 0.0.0.255
rule 1 permit icmp
#
sysname e300
#
firewall packet-filter default permit interzone local trust direction inbound
firewall packet-filter default permit interzone local trust direction outbound
firewall packet-filter default permit interzone local untrust direction inbound
firewall packet-filter default permit interzone local untrust direction outbound
firewall packet-filter default permit interzone local dmz direction inbound
firewall packet-filter default permit interzone local dmz direction outbound
firewall packet-filter default permit interzone trust untrust direction inbound
firewall packet-filter default permit interzone trust untrust direction outbound
firewall packet-filter default permit interzone trust dmz direction inbound
firewall packet-filter default permit interzone trust dmz direction outbound
firewall packet-filter default permit interzone dmz untrust direction inbound
firewall packet-filter default permit interzone dmz untrust direction outbound
#
nat address-group 0 60.28.50.242 60.28.50.242
nat server global 60.28.50.243 inside 192.168.2.1
nat server global 60.28.50.244 inside 192.168.2.2
nat server global 60.28.50.245 inside 192.168.2.3
nat server global 60.28.50.246 inside 192.168.2.4
nat server global 60.28.50.247 inside 192.168.2.5
nat server global 60.28.50.248 inside 192.168.2.6
nat server global 60.28.50.249 inside 192.168.2.7
nat server global 60.28.50.250 inside 192.168.2.8
nat server global 60.28.50.251 inside 192.168.2.9
nat server global 60.28.50.252 inside 192.168.2.10
#
bypass switch-back auto
#
firewall mode route
#
firewall defend land enable
firewall defend smurf enable
firewall defend fraggle enable
firewall defend winnuke enable
firewall defend syn-flood enable
firewall defend icmp-flood enable
firewall defend icmp-redirect enable
firewall defend source-route enable
firewall defend ping-of-death enable
firewall defend teardrop enable
firewall defend tcp-flag enable
firewall defend ip-fragment enable
#
firewall statistic system enable
#
interface Aux0
async mode flow
link-protocol ppp
#
interface Ethernet0/0/0
ip address 60.28.50.242 255.255.255.248
#
interface Ethernet0/0/1
ip address 192.168.2.254 255.255.255.0
#
interface Ethernet1/0/0
#
interface Ethernet1/0/1
#
interface NULL0
#
firewall zone local
set priority 100
#
firewall zone trust
set priority 85
add interface Ethernet0/0/1
#
firewall zone untrust
set priority 5
add interface Ethernet0/0/0
#
firewall zone dmz
set priority 50
#
firewall interzone local trust
#
firewall interzone local untrust
#
firewall interzone local dmz
#
firewall interzone trust untrust
nat outbound 3000 address-group 0
#
firewall interzone trust dmz
#
firewall interzone dmz untrust
#
aaa
authentication-scheme default
#
authorization-scheme default
#
accounting-scheme default
#
domain default
#
#
ip route-static 0.0.0.0 0.0.0.0 60.28.50.241
#
user-interface con 0
user-interface aux 0
authentication-mode none
user-interface vty 0 4
#
return
[e300]
