《ACL规则细则》由会员分享，可在线阅读，更多相关《ACL规则细则（13页珍藏版）》请在金锄头文库上搜索。
1、 rule 258 permit ip source 10.125.3.114 0rule 259 permit ip source 10.125.4.120 0rule 260 permit ip source 10.125.4.131 0rule 261 permit ip source 10.125.3.16 0rule 262 permit ip source 10.125.10.156 0rule 263 permit ip source 10.125.22.131 0rule 264 permit ip source 10.125.22.132 0rule 265 permit i
2、p source 10.125.5.106 0rule 266 permit ip source 10.125.5.155 0rule 267 permit ip source 10.125.4.234 0rule 268 permit ip source 10.125.7.108 0rule 269 permit ip source 10.125.31.130 0rule 270 permit ip source 10.125.5.19 0rule 271 permit ip source 10.125.4.138 0rule 272 permit ip source 10.125.5.12
3、6 0rule 273 permit ip source 10.125.4.101 0acl number 3001rule 1 permit udp destination-port eq snmprule 2 permit tcp destination-port eq telnetrule 3 permit tcp destination-port eq smtprule 4 permit tcp destination-port eq wwwrule 5 permit tcp destination-port eq pop3rule 6 permit tcp destination-p
4、ort eq 443rule 7 permit tcp destination-port eq 1433rule 8 permit tcp destination-port eq 1755rule 9 permit tcp destination-port eq ftprule 10 permit tcp destination-port eq 995rule 11 permit tcp destination-port eq 7708rule 12 permit tcp destination-port eq 7709rule 13 permit tcp destination-port e
5、q 7711rule 14 permit tcp destination-port eq 8989rule 15 permit tcp destination-port eq 22223rule 16 permit tcp destination-port eq 22229rule 17 permit tcp destination-port eq 28672rule 18 permit tcp destination-port range 4430 4433rule 19 permit udp destination-port eq dnsrule 20 permit udp destina
6、tion-port eq 443rule 21 permit udp destination-port eq 1755rule 22 permit udp destination-port eq 8000rule 23 permit udp destination-port eq 4000rule 24 permit udp destination-port range 4430 4433rule 25 permit tcp destination-port eq 465rule 26 permit ip source 10.125.0.30 0rule 28 permit ip destin
7、ation 192.168.0.0 0.0.255.255rule 29 permit ip destination 10.125.31.0 0.0.0.31rule 30 permit ip source 10.125.6.58 0 rule 31 permit ip source 10.125.6.61 0rule 32 permit tcp destination-port eq 8383rule 33 permit tcp destination-port eq 9000rule 34 permit tcp destination-port eq 8080rule 35 permit
8、tcp destination-port eq 13013rule 36 permit ip source 10.125.6.27 0rule 37 permit ip source 10.125.2.178 0rule 38 permit ip source 10.125.5.23 0rule 39 permit ip source 10.125.2.57 0rule 40 permit ip source 10.125.4.151 0rule 41 permit ip source 10.125.10.59 0rule 42 permit ip source 10.125.4.73 0ru
9、le 43 permit ip source 10.125.3.147 0rule 44 permit ip source 10.125.6.165 0rule 45 permit ip source 10.125.6.178 0rule 46 permit ip source 10.125.2.242 0rule 47 permit ip source 10.125.6.202 0rule 48 permit ip source 10.125.25.154 0rule 49 permit tcp destination-port eq 8002rule 50 permit ip source
10、 10.125.3.9 0rule 51 permit ip source 10.125.10.70 0rule 52 permit ip source 10.125.3.121 0rule 53 permit ip source 10.125.4.70 0rule 54 permit ip source 10.125.18.190 0rule 55 permit tcp destination-port eq 5188rule 56 permit tcp destination-port eq 7777rule 57 permit tcp destination-port eq 4443ru
11、le 58 permit tcp destination-port eq 8888rule 59 permit tcp source 10.125.4.9 0 destination-port eq 19788rule 60 permit tcp destination-port eq 2068rule 61 permit tcp source-port eq www destination-port eq wwwrule 62 permit tcp source-port eq 3389 destination-port eq 3389rule 63 permit ip source 10.
12、125.2.82 0rule 64 permit ip source 10.125.5.86 0rule 65 permit ip source 10.125.5.82 0rule 66 permit ip source 10.125.18.5 0rule 67 permit ip destination 59.151.28.218 0rule 70 permit ip destination 10.125.2.59 0rule 71 permit ip source 10.125.2.59 0rule 72 permit ip source 10.125.3.5 0rule 73 permi
13、t ip source 10.125.28.226 0rule 74 permit ip source 10.125.10.119 0rule 75 permit ip source 10.125.4.226 0rule 76 permit ip source 10.125.31.130 0rule 98 deny tcprule 99 deny udp rule 100 permit ip source 10.125.0.0 0.0.255.255#firewall zone localset priority 100#firewall zone trustadd interface Gig
14、abitEthernet0/1set priority 85#firewall zone untrustadd interface GigabitEthernet0/0add interface Virtual-Template1set priority 5#firewall zone DMZadd interface GigabitEthernet1/0set priority 50#firewall interzone local trust#firewall interzone local untrust#firewall interzone local DMZ#firewall int
15、erzone trust untrust#firewall interzone trust DMZ#firewall interzone DMZ untrust#l2tp-group 1mandatory-lcpallow l2tp virtual-template 1tunnel password cipher 94B8%#=H/Q=QMAF41!tunnel name vpnuser#ip route-static 0.0.0.0 0.0.0.0 220.194.176.9 preference 60ip route-static 10.1.0.0 255.255.0.0 10.125.2
16、.1 preference 60ip route-static 10.124.0.0 255.255.0.0 10.125.2.1 preference 60ip route-static 10.125.0.0 255.255.0.0 10.125.2.1 preference 60ip route-static 10.125.2.29 255.255.255.255 10.125.2.62 preference 60ip route-static 10.125.2.50 255.255.255.255 10.125.2.62 preference 60#snmp-agentsnmp-agent local-engineid 000007DB7F000001000010FDsnmp-agent community read public snmp-agent community write privatesnmp-agent sys-info version v1 v2c#user-interface con 0authentication-m
