华为USG6600防火墙NAT地址转换配置实例.doc

华为USG6600防火墙NAT地址转换配置实例 [NAT-FW]配置 19:19:25 2015/11/02 # interface GigabitEthernet0/0/0 alias GE0/MGMT ip address dhcp select interface dhcp server gateway-list # interface GigabitEthernet0/0/1 ip address # interface GigabitEthernet0/0/2 ip address # interface GigabitEthernet0/0/3 ip address 8 52 # interface GigabitEthernet0/0/4 # interface GigabitEthernet0/0/5 # interface GigabitEthernet0/0/6 # interface GigabitEthernet0/0/7 # interface GigabitEthernet0/0/8 # interface NULL0 alias NULL0 # firewall zone local set priority 100 # firewall zone trust set priority 85 add interface GigabitEthernet0/0/0 add interface GigabitEthernet0/0/2 # firewall zone untrust set priority 5 add interface GigabitEthernet0/0/3 # firewall zone dmz set priority 50 # firewall zone name ivms set priority 10 add interface GigabitEthernet0/0/1 # aaa local-user admin password cipher %$%$A`_-qU7951.=W!Jj-y2)}%$%$ local-user admin service-type web terminal telnet local-user admin level 15 authentication-scheme default # authorization-scheme default # accounting-scheme default # domain default # # nqa-jitter tag-version 1 # ip route-static 7 ip route-static ip route-static ip route-static # banner enable # user-interface con 0 authentication-mode none user-interface vty 0 4 authentication-mode none protocol inbound all # slb # right-manager server-group # sysname NAT-FW # l2tp domain suffix-separator @ # firewall packet-filter default permit interzone local trust direction inbound firewall packet-filter default permit interzone local trust direction outbound firewall packet-filter default permit interzone local untrust direction inbound firewall packet-filter default permit interzone local untrust direction outbound firewall packet-filter default permit interzone local dmz direction inbound firewall packet-filter default permit interzone local dmz direction outbound firewall packet-filter default permit interzone local ivms direction