防御保护第一次作业

2402_88538130

143人浏览 · 2026-07-27 12:24:27

2402_88538130 · 2026-07-27 12:24:27 发布

在这里插入图片描述
1、配置IP以及子接口处理的Vlan信息
配置命令：
FW1：int g 1/0/0
ip address 10.0.0.254 24
子接口：
FW1:int g 1/0/1.2
ip address 192.168.1.126 25
vlan-tapy dot1q 2
划分安全区域：
FW1：firewall zone dmz
add int g 1/0/0
firewall zone trust
add int g 1/0/1.2
add int g 1/0/1.3
在这里插入图片描述

测试连通

创建时间段
[FW1]time-range working-time
[FW1-time-range-working-time]period-range 08:00:00 to 18:00:00 working-day
创建地址
[FW1]ip address-set BG type object
[FW1-object-address-set-BG]address 192.168.1.0 mask 25
[FW1]ip address-set OA_Server type object
[FW1-object-address-set-OA_Server]address 10.0.0.1 mask 32
编写安全策略
[FW1]security-policy
[FW1-policy-security]rule name BG_to_OA-Server
[FW1-policy-security-rule-BG_to_OA-Server]source-zone trust
[FW1-policy-security-rule-BG_to_OA-Server]destination-zone dmz
[FW1-policy-security-rule-BG_to_OA-Server]source-address address-set BG
[FW1-policy-security-rule-BG_to_OA-Server]destination-address address-set OA_Server
[FW1-policy-security-rule-BG_to_OA-Server]time-range working-time
[FW1-policy-security-rule-BG_to_OA-Server]action permit
在这里插入图片描述

连通性测试

其他配置相同在web界面配置即可

连通性测试