Shulou(Shulou.com)06/01 Report--

Topology:

Basic Configuration Refer to Huawei Firewall USG Basic Configuration (http://692344.blog.51cto.com/682344/1607629)

Here are only the client and server configurations:

Firewall Configuration:

Policy Configuration:

Monitor FTP configuration (FTP is a dynamic protocol):

Testing:

----------------------------------

If FTP uses a special port, configure it as follows:

acl number 2001

rule 5 permit source 192.168.1.100 0

port-mapping ftp port 2121 acl 2001

ip service-set newftp type object

service 0 protocol tcp description 2121

firewall interzone dmz untrust

detect ftp

policy interzone dmz untrust inbound

policy 0

action permit

policy service service-set http

policy service service-set newftp

policy destination 192.168.1.100 0

Welcome to subscribe "Shulou Technology Information " to get latest news, interesting things and hot topics in the IT industry, and controls the hottest and latest Internet news, technology news and IT industry trends.