华为 SecPath防火墙 aspf典型配置

一、 组网需求

在防火墙 上配置 一ASPF策略 ， 检测通过防火墙的FTP流量。实现：内部网络用户发起的FTP连接的返回报文，则允许其通过防火墙进入内部网络，其他报文被禁止。

二、组网图

三、配置步骤

[DOWN] dis cur                                                                 

#                                                                              

  sysname DOWN                                                                  

#                                                                              

  firewall packet-filter enable                                                 

  firewall packet-filter default permit                                         

#                                                                               

  undo connection-limit enable                                                  

  connection-limit default deny                                                 

  connection-limit default amount upper-limit 50 lower-limit 20                 

#                                                                              

  firewall statistic system enable                                              

#                                                                               

radius scheme system                                                           

#                                                                              

domain system                                                                   

#                                                         &