目标:AR telnet FW
防火墙接口最好不要使用G0/0/0口
配置命令:
- 登录防火墙
- 配置防火墙与AR接口IP地址:
FW2:
int G1/0/0
ip address 192.168.1.3 255.255.255.0
AR1:
int G0/0/0
ip address 192.168.1.1 255.255.255.0
- 防火墙接口加区域:
firewall zone trust
add interface GigabitEthernet1/0/0
- 配置安全策略(重要一步):
security-policy ---允许接口到本地
rule name allow_telnet
source-zone trust
destination-zone local
action permit
- 配置用户:
创建远程用户登录方式
[fw]user-interface vty 0 4
[fw-ui-vty0-4]authentication-mode aaa
[fw-ui-vty0-4]protocol inbound telnet
创建远程用户
[fw]aaa
[fw-aaa]manager-user huawei
[fw-aaa-manager-user-huawei]password cipher huawei@123
[fw-aaa-manager-user-huawei]service-type telnet
[fw-aaa-manager-user-huawei]level 15