Shulou(Shulou.com)06/01 Report--

Common commands for Netscreen Firewall-Interface Section

Ns25- > get interface / / View API information

A-Active, I-Inactive, U-Up, D-Down, R-Ready

Interfaces in vsys Root:

Name IP Address Zone MAC VLAN State VSD

Eth2 192.168.0.2 Compact 24 Trust 0014.f642.7c20-U-

Eth3 0.0.0.0max 0 DMZ 0014.f642.7c25-D-

Eth4 116.233.11.11 eth4 32 Untrust 0014.f642.7c26-U-

Eth5 0.0.0.0max 0 Trust 0014.f642.7c27-D-

Vlan1 0.0.0.0max 0 VLAN 0014.f642.7c2f 1 D-

Ns25- > get int eth2 / / View the configuration of interface 1

Interface ethernet1:

Number 0, if_info 0, if_index 0, mode nat

Link up, phy-link up/full-duplex

Vsys Root, zone Trust, vr trust-vr

Dhcp client disabled

PPPoE disabled

* ip 192.168.0.2 Universe 24 mac 0014.f642.7c20

* manage ip 192.168.0.2, mac 0014.f642.7c20

Route-deny disable

Ping enabled, telnet enabled, SSH enabled, SNMP enabled

Web enabled, ident-reset disabled, SSL enabled

Webauth disabled, webauth-ip 0.0.0.0

OSPF disabled BGP disabled RIP disabled

Bandwidth: physical 100000kbps, configured 0kbps, current 0kbps

Total configured gbw 0kbps, total allocated gbw 0kbps

DHCP-Relay disabled

DHCP-server enabled, status on

Ns25- > set zone name office / / create a three-tier zone named Office

Ns25- > set zone name L2-office L2 1 / / create a layer 2 zone called L2-Office (the layer 2 interface must start with L2 -) and vlan id is 1.

Ns25- > set interface eth5 zone office / / set interface 4 to the interface of office zone.

Ns25- > set interface vlan1 ip 10.10.10.10 ns25- 24 / / set the ip of vlan1 to 10.10.10.10

Ns25- > set interface vlan1 manage web / / enable the web management function of the vlan1 API

Ns25- > set interface vlan1 manage ping / / enable the ping function of the vlan1 API

Ns25- > set interface eth5 nat / / set interface 4 to nat mode

Ns25- > set interface eth5 route / / set interface 4 to route mode

Set interface ethernet1 dhcp server service / / enable dhcp service on interface 1

Set interface ethernet1 dhcp server enable / / enable dhcp service on interface 1

Set interface ethernet1 dhcp server option lease 1440000 / / set dhcp service lease

Set interface ethernet1 dhcp server option gateway 192.168.0.2

Set interface ethernet1 dhcp server option netmask 255.255.255.0

Set interface ethernet1 dhcp server option dns1 202.96.209.5

Set interface ethernet1 dhcp server option dns2 202.96.209.133

Set interface ethernet1 dhcp server ip 192.168.0.10 to 192.168.0.100 / / dhcp address pool

Ns25- > set interface eth4 mip 1.1.1.1 host 2.2.2.2 vrouter trust-vr / / set mip, and public network ip1.1.1.1 is bound to private network ip 2.2.2.2

Ns25- > unset interface eth4 mip 1.1.1.1 / / cancel the mip setting of 1.1.1.1

Ns25- > set interface eth4 vip untrust-ip + 21 ftp 192.168.0.10 / / set vip

Ns25- > set interface eth4 vip untrust-ip + 8000 ftp 192.168.0.10

Welcome to subscribe "Shulou Technology Information " to get latest news, interesting things and hot topics in the IT industry, and controls the hottest and latest Internet news, technology news and IT industry trends.