【问题2】下面是防火墙的部分配置,请完善配置。image.pngsystem-v

考试题库2022-08-02  39

问题 【问题2】下面是防火墙的部分配置,请完善配置。image.pngsystem-view[Huawei]  (6)   FW[FW]interface GigabitEthernet 1/0/0[FW-GigabitEthernet 1/0/0]ip address 192.168.200.1 30[FW-GigabitEthernet 1/0/0]service-manage enable[FW-GigabitEthernet 1/0/0]service-manage ping permit   # 这句命令的含义  (7)  [FW-GigabitEthernet 1/0/0]quit[FW]interface GigabitEthernet 1/0/1[FW-GigabitEthernet 1/0/1]ip address 192.168.100.254 24[FW-GigabitEthernet 1/0/1]quit[FW]interface GigabitEthernet 1/0/2[FW-GigabitEthernet 1/0/2]ip address 192.168.1.254 24[FW-GigabitEthernet 1/0/2]quit[FW]firewall zone   (8)  [FW-zone-trust]add interface GigabitEthernet 1/0/2[FW-zone-trust]quit[FW]firewall zone   (9)  [FW-zone-untrust]add interface GigabitEthernet 1/0/0[FW-zone-untrust]quit[FW]firewall zone   (10)  [FW-zone-untrust]add interface GigabitEthernet 1/0/1[FW-zone-untrust]quit[FW]security-policy[FW-policy-security]rule name 1[FW-policy-security-rule-1]source-zone trust[FW-policy-security-rule-1]destination-zone untrust[FW-policy-security-rule-1]source address   (11)  [FW-policy-security-rule-1]destination-address   (12)  [FW-policy-security-rule-1]action   (13)  [FW-policy-security-rule-1]quit......

选项

答案

解析 (6)sysname,(7)开启该接口的ICMP服务(8)trust(9)untrust (10)dmz(11)192.168.1.0,24或192.168.1.0,255.255.255.0, (12)any(13)permit
转载请注明原文地址:https://tihaiku.com/congyezige/2405056.html

最新回复(0)