1. 配ip

2. 子接口

3. web规则

具体代码如下

1、设定当前子接口处理的vlan信息
[FW1-GigabitEthernet1/0/1.2]vlan-type dot1q 2

地址创建

[FW1]ip address-set BG type object --- 创建一个BG的地址集 [FW1-object-address-set-BG]address 192.168.1.0 mask 25 [FW1]ip address-set OA_Server type object [FW1-object-address-set-OA_Server]address 10.0.0.1 mask 32
2、时间段
[FW]time-range working-time 
[FW-time-range-working-time]period-range 08:00:00 to 18:00:00 working-day
3、进入安全策略配置视图
[FW]security-policy 
[FW-policy-security]rule name policy_1
[FW-policy-security-rule-policy_1]description BG_to_OA
[FW-policy-security-rule-policy_1]destination-zone dmz
[FW-policy-security-rule-policy_1]source-address address-set BG
[FW-policy-security-rule-policy_1]destination-address address-set "OA Server"
[FW-policy-security-rule-policy_1]time-range working-time
[FW-policy-security-rule-policy_1]action permit