命令记不住

登陆

H3C 配置防火墙

01.H3C配置防火墙

1.修改默认策略

添加用户

login: admin
Password: admin
<H3C>%Jan 11 23:36:05:946 2022 H3C SHELL/5/SHELL_LOGIN: -Context=1; admin logged in from con0.

<H3C>
<H3C>sys
[H3C]local-user wuqun
[H3C-luser-manage-wuqun]service-type http https
[H3C-luser-manage-wuqun]password simple  123

开启服务

[H3C]ip http enable
[H3C]ip https enable

默认拒绝所有,需要修改策略

[H3C]security-zone name Management 
[H3C-security-zone-Management]import int GigabitEthernet 1/0/0
[H3C]acl advanced 3000
[H3C-acl-ipv4-adv-3000]rule permit ip

绑定策略

[H3C]zone-pair security source management destination local
[H3C-zone-pair-security-Management-Local]packet-filter 3000
[H3C-zone-pair-security-Management-Local]quit
[H3C]zone-pair security source local destination management
[H3C-zone-pair-security-Local-Management]packet-filter 3000

2.配置防火墙设备IP

配置IP

[H3C]int GigabitEthernet 1/0/0
[H3C-GigabitEthernet1/0/0]ip add 10.0.0.2 8

3.web页面访问

http://10.0.0.2/

推荐阅读