发新话题
悬赏主题

各位帮看看这个配置,是否有问题啊??

补充资料

#
sysname 46-20
#
firewall enable
#
nat address-group 1 221.7.221.87 221.7.221.88
#
radius scheme system
#
domain system
#
local-user yhxy
password cipher ^^WB,CS)GKCQ=^Q`MAF4<1!!
service-type telnet
level 3
#
traffic classifier p2pin operator or
if-match acl 3100
#
traffic behavior p2pin
  car cir 8000 cbs 8000 ebs 0 green pass red discard
#
qos policy p2pin
classifier p2pin behavior p2pin
#                                         
acl number 2000
rule 0 permit source 192.168.0.0 0.0.255.255
rule 10 deny
#
acl number 3000
rule 0 deny ip destination 222.76.215.10 0
rule 1 deny ip destination 219.157.11.83 0
rule 2 deny ip destination 211.161.159.90 0
rule 3 deny ip destination 61.152.116.72 0
rule 4 deny ip destination 82.110.105.18 0
rule 5 deny ip destination 61.145.112.13 0
rule 6 deny ip destination 219.150.221.60 0
rule 7 deny ip destination 218.93.124.228 0
rule 8 deny ip destination 61.152.198.41 0
rule 9 deny ip destination 61.152.107.126 0
rule 10 deny ip destination 61.139.55.84 0
rule 11 deny ip destination 202.107.245.44 0
rule 12 deny ip destination 211.95.79.56 0
rule 13 deny ip destination 202.107.209.172 0
rule 14 deny ip destination 221.238.193.5 0
rule 15 deny ip destination 61.184.100.8 0
rule 16 deny ip destination 61.242.169.39 0
rule 17 deny ip destination 202.105.31.85 0
rule 18 deny ip destination 221.238.195.5 0
rule 19 deny ip destination 210.51.188.126 0
rule 20 deny ip destination 219.148.223.23 0
rule 21 deny ip destination 221.229.121.109 0
rule 23 deny ip destination 222.173.30.4 0
rule 24 deny ip destination 61.134.26.159 0
rule 25 deny ip destination 220.169.62.4 0
rule 26 deny ip destination 202.102.48.42 0
rule 27 deny ip destination 202.101.235.119 0
rule 28 deny ip destination 211.95.79.152 0
rule 29 deny ip destination 221.10.254.244 0
rule 30 deny ip destination 61.129.77.135 0
rule 31 deny ip destination 61.129.77.167 0
rule 32 deny ip destination 221.208.208.199 0
rule 33 deny ip destination 219.153.14.206 0
rule 34 deny ip destination 61.129.92.33 0
rule 35 deny ip destination 202.107.225.38 0
rule 36 deny ip destination 61.152.91.8 0
rule 37 deny ip destination 61.172.203.140 0
rule 38 deny ip destination 219.153.18.230 0
rule 39 deny ip destination 61.172.246.62 0
rule 40 deny ip destination 61.129.51.59 0
rule 41 deny ip destination 220.189.243.242 0
rule 42 deny ip destination 218.244.143.84 0
rule 43 deny ip destination 218.92.172.142 0
rule 44 deny ip destination 61.233.41.148 0
rule 45 deny ip destination 219.140.253.2 0
rule 46 deny ip destination 210.188.203.100 0
rule 47 deny ip destination 72.22.69.92 0
rule 48 deny ip destination 61.155.22.107 0
rule 49 deny ip destination 218.22.1.133 0
rule 50 deny ip destination 222.91.99.38 0
rule 51 deny ip destination 219.145.107.240 0
rule 52 deny ip destination 61.129.102.211 0
rule 53 deny ip destination 202.96.116.60 0
rule 54 deny ip destination 218.5.17.110 0
rule 55 deny ip destination 210.51.214.74 0
rule 56 deny ip destination 202.109.122.16 0
rule 57 deny ip destination 202.100.66.166 0
rule 58 deny ip destination 61.144.253.228 0
rule 59 deny ip destination 220.189.249.182 0
rule 60 deny ip destination 219.145.107.112 0
rule 61 deny ip destination 61.141.32.6 0
rule 62 deny ip destination 61.129.251.246 0
rule 63 deny ip destination 222.35.58.109 0
rule 64 deny ip destination 61.129.254.185 0
rule 65 deny ip destination 216.8.177.28 0
rule 66 deny ip destination 219.148.87.71 0
rule 67 deny ip destination 210.51.170.68 0
rule 69 deny ip destination 61.152.144.252 0
rule 73 deny ip destination 218.93.205.100 0
rule 74 deny ip destination 219.145.107.239 0
rule 75 deny ip destination 218.200.117.163 0
rule 76 deny ip destination 61.129.47.156 0
rule 77 deny ip destination 60.191.243.38 0
rule 78 deny ip destination 219.146.159.57 0
rule 79 deny ip destination 61.153.8.12 0
rule 80 deny ip destination 61.138.213.249 0
rule 81 deny ip destination 61.152.146.195 0
rule 82 deny ip destination 61.175.209.99 0
acl number 3001
rule 0 deny ip source 192.168.80.0 0.0.0.255 time-range huawei1
rule 1 deny ip source 192.168.80.0 0.0.0.255 time-range huawei2
rule 2 deny ip source 192.168.81.0 0.0.0.255 time-range huawei1
rule 3 deny ip source 192.168.81.0 0.0.0.255 time-range huawei2
rule 4 deny ip source 192.168.82.0 0.0.0.255 time-range huawei1
rule 5 deny ip source 192.168.82.0 0.0.0.255 time-range huawei2
rule 6 deny ip source 192.168.88.0 0.0.0.255 time-range huawei1
rule 7 deny ip source 192.168.88.0 0.0.0.255 time-range huawei2
rule 8 deny ip source 192.168.89.0 0.0.0.255 time-range huawei1
rule 9 deny ip source 192.168.89.0 0.0.0.255 time-range huawei2
rule 11 deny ip source 192.168.90.0 0.0.0.255 time-range huawei1
rule 12 deny ip source 192.168.90.0 0.0.0.255 time-range huawei2
rule 13 deny ip source 192.168.91.0 0.0.0.255 time-range huawei1
rule 14 deny ip source 192.168.91.0 0.0.0.255 time-range huawei2
acl number 3003
rule 0 deny icmp
rule 1 deny tcp destination-port eq 554
rule 2 deny tcp destination-port eq 1022
rule 3 deny tcp destination-port eq 1023
rule 6 deny tcp destination-port eq 2745
rule 7 deny tcp destination-port eq 3140
rule 8 deny tcp destination-port eq 4444
rule 9 deny tcp destination-port eq 4662
rule 10 deny tcp destination-port eq 5554
rule 11 deny udp destination-port eq 6666
rule 12 deny tcp destination-port eq 7626
rule 13 deny tcp destination-port eq 9493
rule 14 deny tcp destination-port eq 9996
rule 15 deny tcp destination-port eq 17300
rule 16 deny tcp destination-port eq 29853
rule 17 deny udp destination-port eq 29853
rule 18 deny tcp destination-port eq 135
rule 19 deny udp destination-port eq 135
rule 20 deny tcp destination-port eq 445
rule 21 deny udp destination-port eq netbios-ns
rule 22 deny udp destination-port eq netbios-dgm
rule 23 deny tcp destination-port eq 139
rule 24 deny udp destination-port eq netbios-ssn
rule 25 deny udp destination-port eq 445
rule 26 deny tcp destination-port eq 593
rule 27 deny udp destination-port eq 593
rule 31 deny tcp destination-port eq 6969
rule 32 deny tcp destination-port range 6881 6889
acl number 3100
rule 1000 permit tcp destination-port gt 6000
rule 1010 permit udp destination-port gt 6000
acl number 3999
rule 0 deny ip source 0.0.0.0 255.255.255.0 time-range huawei1
#
interface Aux0
async mode flow
#
interface Ethernet0/0/0
ip address 192.168.250.10 255.255.255.0
firewall packet-filter 3001 inbound
#
interface Ethernet0/0/1
ip address 221.7.221.87 255.255.255.98
firewall packet-filter 3003 inbound
firewall packet-filter 3000 outbound     
nat outbound 2000 address-group 1
qos apply policy p2pin inbound
#
interface NULL0
#
time-range huawei1 23:00 to 24:00 Thu Wed Tue Mon Sun
time-range huawei2 00:00 to 08:00 Thu Wed Tue Mon Sun
#
FTP server enable
#
telnet source-interface Ethernet0/0/0
#
ip route-static 0.0.0.0 0.0.0.0 221.7.221.1 preference 60
ip route-static 192.168.0.0 255.255.0.0 192.168.250.1 preference 60
ip route-static 192.168.100.100 255.255.255.255 Ethernet 0/0/1 preference 60
#
user-interface con 0
user-interface aux 0
set authentication password cipher [url=mailto:7=S@*E1]N=/Q=^Q`MAF4<1]7=S@*E1]N=/Q=^Q`MAF4<1[/url]!!
user-interface vty 0 4
authentication-mode scheme
#
return
最佳答案 ( 回答者: skywalkerlt )
学习以下