安全-包过滤控制访问列表

当前路由器提示视图

依次输入的配置命令，重要的命令红色突出显示

简单说明

!

适用版本vrp1.74及1.44

[Router]

info-center loghost 0 10.0.0.8 7 local7    

记录到日志主机10.0.0.8上

[Router]

firewall enable                                 

启动防火墙

[Router]

settr 08:30 18:00

设置special acl的启用时间

[Router]

timerange enable

允许按时间段过滤

!                                                   

[Router]

acl 1 match-order auto                          

acl 1

[Router-acl-1]

rule normal deny source any logging

禁止所有

!                                                   

[Router]

acl 100 match-order auto                        

acl 100

[Router-acl-100]

rule special deny tcp any destination 10.0.1.1 0.0.0.0 destination-port equal telnet logging               

禁止任何源地址telnet到Router,对违反的报文做日志记录

!                                                   

[Router]

interface Ethernet0                              

进入以太0口

[Router-Ethernet0]

ip address 10.0.1.1 255.255.255.0           

配置ip地址

[Router-Ethernet0]

firewall packet-filter 100 inbound

in方向引用acl100

!                                                   

[Router]

interface Serial0                                

进入串口0口

[Router-Serial0]

link-protocol ppp                              

封装ppp协议

[Router-Serial0]

ip address 10.0.0.1 255.255.255.0           

配置ip地址

[Router-Serial0]

firewall packet-filter 1 outbound            

out方向引用acl 1

!                                                   

quit                                                 

[Router]

ip route-static 0.0.0.0 0.0.0.0 Serial 0 preference 60                       

配置静态路由

!