Quidway Eudemon 系列防火墙增加IP访问

Quidway Eudemon 系列防火墙
示例是增加本机IP 173.6.8.164，使其能直接访问实时库
步骤：
1.通过查询网络电路图确定是经过防火墙10.248.2.188，telnet到此防火墙[@more@]

#telnet 10.248.2.188
HRP_Msu 3
Password
2.进入系统模式
HRP_Msystem-view
Enter system view , return user view with Ctrl+Z.
3.查看有哪些访问控制列表
HRP_M[Eudemon_1]display current-configuration
#
acl number 3001
description su
rule 1 permit ip source 173.6.8.180 0 destination 10.248.2.0 0.0.0.63
rule 2 permit ip source 173.6.8.163 0 destination 10.248.2.0 0.0.0.63
rule 3 permit ip source 173.6.8.174 0 destination 10.248.2.0 0.0.0.63
rule 4 permit ip source 173.6.8.153 0 destination 10.248.2.0 0.0.0.63
rule 5 permit ip source 173.6.8.168 0 destination 10.248.2.0 0.0.0.63
rule 6 permit ip source 173.6.8.164 0 destination 10.248.2.0 0.0.0.63
rule 10 deny ip source 173.6.8.0 0.0.0.255 destination 10.248.2.0 0.0.0.63
rule 15 permit ip
acl number 3002
#
4.进入列表3001
HRP_M[Eudemon_1]acl 3001
HRP_M[Eudemon_1-acl-adv-3001]
5.查看列表3001（permit允许 deny阻止）
HRP_M[Eudemon_1-acl-adv-3001]display this
#
acl number 3001
description su
rule 1 permit ip source 173.6.8.180 0 destination 10.248.2.0 0.0.0.63
rule 2 permit ip source 173.6.8.163 0 destination 10.248.2.0 0.0.0.63
rule 3 permit ip source 173.6.8.174 0 destination 10.248.2.0 0.0.0.63
rule 4 permit ip source 173.6.8.153 0 destination 10.248.2.0 0.0.0.63
rule 5 permit ip source 173.6.8.168 0 destination 10.248.2.0 0.0.0.63
rule 6 permit ip source 173.6.8.164 0 destination 10.248.2.0 0.0.0.63
rule 10 deny ip source 173.6.8.0 0.0.0.255 destination 10.248.2.0 0.0.0.63
rule 15 permit ip
#
return
HRP_M[Eudemon_1-acl-adv-3001]
6.如果想阻止或允许173.6.8.164，则要如下命令，这个命令实时生效，但是一重启就会回到原来的状态
HRP_M[Eudemon_1-acl-adv-3001]undo rule 6 --去掉这个信息
HRP_M[Eudemon_1-acl-adv-3001]rule 6 permit ip source 173.6.8.164 0 destination 10.248.2.0 0.0.0.63 --增加这个信息，允许此IP
7.保存，退回到>符号
HRP_M[Eudemon_1-acl-adv-3001]quit
HRP_M[Eudemon_1]quit
HRP_Msave

来自 “ ITPUB博客 ” ，链接：http://blog.itpub.net/7490392/viewspace-1037422/，如需转载，请注明出处，否则将追究法律责任。

转载于:http://blog.itpub.net/7490392/viewspace-1037422/