防火墻文檔登錄方式：第一：調試前請準備好Console線、CRT軟件。通過CRT按鍵入后登錄：第二：通過遠程方式telnet登錄。Telnet192.168.241.1口令：adminH3Ch3cswdn進入用戶界面鍵入命令：system-view//進入系統視圖進入系統界面①外網配置第一：新增ACL#acladvanced3000//ACL3000rule0permitip//容許所有通過#第二：新增運營商出口interfaceGigabitEthernet1/0/15//進入物理端口portlink-moderoutedescriptionYIDONG//端口描述ipaddress223.112.193.218255.255.255.252//端口IP地址dnsserver221.131.143.69//端口DNSdnsserver112.4.0.55//端口DNSnatoutbound3000//NAT第三：域配置#security-zonenameUntrust//進入untrsut域importinterfaceGigabitEthernet1/0/15//將外網口加入untrsut域#第四：域間策略#zone-pairsecuritysourceUntrustdestinationLocal//進入源Untrust目的Local方向packet-filter3000//匹配ACL3000#zone-pairsecuritysourceUntrustdestinationTrust//進入源Untrsut目的Trsut方向packet-filter3000//匹配ACL3000#第五：出口路由iproute-static0.0.0.00223.112.193.217//出口路由②內網配置第一：新增ACL#acladvanced3000//ACL3000rule0permitip//容許所有通過#第二：新增內網網段#interfaceVlan-interface20//網段VLANdescription人事行政部//網段描述ipaddress192.168.20.254255.255.255.0//網段IP地址#第三：域配置#security-zonenametrust//進入trsut域importinterfaceVlan-interface20//將內網網段加入trsut域#第四：域間策略#zone-pairsecuritysourcetrustdestinationLocal//進入源trust目的Local方向packet-filter3000//匹配ACL3000#zone-pairsecuritysourcetrustdestinationunTrust//進入源trsut目的unTrsut方向packet-filter2999//匹配ACL2999第五：MAC綁定DHCP#dhcpserverip-poolvlan20//vlan20的DHCPgateway-list192.168.20.254//網管network192.168.20.0mask255.255.255.0//dhcp地址池范圍dns-list221.131.143.69112.4.0.55//DNS列表static-bindip-address192.168.20.12mask255.255.255.0hardware-address4437-e635-e516//MAC綁定#第六：ACL放行#aclbasic2999//ACL2999rule100permitsource192.168.20.110//容許綁定了MAC的IP地址#③第三方區域第一：將第三方區域加入域DMZ#security-zonenameDMZ//進入DMZ域importinterfaceVlan-interface201//引入vlan201importinterfaceVlan-interface202//引入vlan202importinterfaceVlan-interface204//引入vlan204importinterfaceVlan-interface210//引入vlan210#第二：域間策略#zone-pairsecuritysourceDMZdestinationLocal//進入源DMZ目的Local方向packet-filter3000//匹配ACL3000#zone-pairsecuritysourceDMZdestin