eve中的华为USG防火墙

eve中的华为防火墙

接口配置ip地址：
interface GigabitEthernet1/0/0
 undo shutdown
 ip address 10.12.3.3 255.255.0.0
 service-manage http permit
 service-manage https permit
 service-manage ping permit
 
把接口加入到某区域
firewall zone trust
 add interface GigabitEthernet1/0/0


安全策略
security-policy
   default action permit
    y
    
 配置登录使用的帐号：
 aaa
  manager-user admin
      password 密码
      service-type web terminal
      level 15

连接好，默认就可以打开防火墙的web界面

interface GigabitEthernet0/0/0
 undo shutdown
 ip address 192.168.0.1 255.255.255.0
 service-manage http permit
 service-manage https permit
 service-manage ping permit
#

配置密码：eve中华为usg防火墙的密码默认为admin

[USG6000V2]aaa
[USG6000V2-aaa]
[USG6000V2-aaa]manager-user admin
[USG6000V2-aaa-manager-user-admin]password
Enter Password:
Confirm Password:
[USG6000V2-aaa-manager-user-admin]quit

成功登录：

#修改接口的ip与配置网关
interface GigabitEthernet0/0/0
[USG6000V2-GigabitEthernet0/0/0]ip address 10.11.107.1 24           
[USG6000V2-GigabitEthernet0/0/0]gateway 10.11.11.254
[USG6000V2-GigabitEthernet0/0/0]dis this
interface GigabitEthernet0/0/0
 undo shutdown
 ip binding vpn-instance default
 ip address 10.11.107.1 255.255.255.0
 gateway 10.11.11.254
 service-manage http permit
 service-manage https permit
 service-manage ping permit
#

[USG6000V2]telnet server enable

在接口上也允许telnet进来

interface GigabitEthernet0/0/0
 service-manage telnet permit

测试:telnet成功

[USG6000V2]clock timezone Beijing add ?
  HH:MM:SS  Time zone offset

配置时区：

clock timezone Beijing add 08:00:00

user-interface con 0
 authentication-mode password
 set authentication password cipher xxxx
 idle-timeout 0 0

模拟器EVE2.0.3-92（列表、list、全）evelist，建议使用EVE2.0.3-112社区版
http://www.zh-cjh.com/wenzhangguilei/1164.html