<ZJDS_FW>dis cu
#
version 5.20, Release 5142P02
#
sysname ZJDS_FW
#
undo voice vlan mac-address 00e0-bb00-0000
#
interzone policy default by-priority
#
domain default enable system
#
telnet server enable
#
undo alg dns
undo alg rtsp
undo alg h323
undo alg sip
undo alg sqlnet
undo alg pptp
undo alg ils
undo alg nbt
undo alg msn
undo alg qq
undo alg tftp
undo alg sccp
undo alg gtp
#
session synchronization enable
#
password-recovery enable
#
vlan 1
#
domain system
access-limit disable
state active
idle-cut disable
self-service-url disable
#门槛记
pki domain default
crl check disable
#
user-group system
group-attribute allow-guest
#
password cipher $c$3$m0aSXdqVqvpZyW+yMPXXzfwxbVBSXtAw9hJlAw==
authorization-attribute level 3
service-type telnet
service-type web
#
interface NULL0
#
interface Vlan-interface1
#
interface GigabitEthernet0/0
port link-mode route
ip address 192.168.1.1 255.255.255.0
#
interface GigabitEthernet0/1
port link-mode route
#
interface GigabitEthernet0/2
port link-mode route
#
interface GigabitEthernet0/3
port link-mode route
#
interface GigabitEthernet0/4
port link-mode route
ip address 192.168.150.2 255.255.255.0
#
interface GigabitEthernet0/5
port link-mode route
ip address 192.168.100.1 255.255.255.0
#
vd Root id 1
#
zone name Management id 0
priority 100
zone name Local id 1
priority 100
zone name Trust id 2
priority 85
import interface GigabitEthernet0/5
金钢绳zone name DMZ id 3
priority 50
zone name Untrust id 4
胶管缠绕机priority 5
import interface GigabitEthernet0/4
switchto vd Root
zone name Management id 0
拉丝钢板ip virtual-reassembly
zone name Local id 1
ip virtual-reassembly
zone name Trust id 2
ip virtual-reassembly
zone name DMZ id 3
ip virtual-reassembly
zone name Untrust id 4
ip virtual-reassembly
interzone source Trust destination Untrust
rule 0 permit
source-ip any_address
destination-ip any_address
service any_service
rule enable
rule 1 permit logging
interzone source Untrust destination Trust
rule 0 permit
source-ip any_address
destination-ip any_address
service any_service
rule enable
背景音乐播放系统interzone source Any destination Any rule 0 permit
source-ip any_address
destination-ip any_address
service any_service
rule enable
#
ip route-static 0.0.0.0 0.0.0.0 192.168.150.1
ip route-static 172.16.0.0 255.255.0.0 192.168.100.2
ip route-static 172.16.0.0 255.255.224.0 192.168.100.2
#
load xml-configuration
#
load tr069-configuration
#
user-interface con 0
user-interface vty 0 4
authentication-mode scheme
user privilege level 3
#
return