NetscreenJuniper防火墙VPN配置说明(3)

set address \

set address \set address \set address \set address \set address \set address \set address \set address \set address \set group address \

set group address \ set group address \ set group address \set group address \

set group address \

set group address \ set group address \

set ike gateway \for 192.168.0.0/19\address 61.51.110.10 Main outgoing-interface \

set ike gateway \\set ike gateway \

set ike gateway \set ike respond-bad-spi 1 unset ikeikeid-enumeration unset ike dos-protection

unset ipsec access-session enable

set ipsec access-session maximum 5000 set ipsec access-session upper-threshold 0 set ipsec access-session lower-threshold 0 set ipsec access-session dead-p2-sa-timeout 0 unset ipsec access-session log-error

unset ipsec access-session info-exch-connected

unset ipsec access-session use-error-log

set vpn \sec-level compatible

set vpn \

set vpn \sec-level compatible

set vpn \

set url protocol websense exit

set policy id 16 from \ \

set policy id 16

exit

set policy id 15 from \ \ set policy id 15 exit

set policy id 14 from \ \ set policy id 14

exit

set policy id 13 from \ \ set policy id 13 exit

set policy id 10 from \ \ set policy id 10 exit

set policy id 5 from \ \ set policy id 5

exit

set policy id 11 from \ \ set policy id 11

exit

set policy id 12 from \ \ set policy id 12 exit

set syslog config \

set syslog config \set syslog src-interface ethernet2 set syslog enable

unset log module system level warning destination syslog unset log module system level notification destination syslog unset log module system level information destination syslog unset log module system level debugging destination syslog set nsmgmtbulkcli reboot-timeout 60 set ssh version v2 set ssh enable

set config lock timeout 5

set snmp community \ traffic version v2c

set snmp host \set snmp host \set snmp name \set snmp port listen 161 set snmp port trap 162 set vrouter \exit

set vrouter \

unset add-default-route

set route 172.16.12.0/24 interface ethernet2 gateway 172.16.1.1 preference 20 set route 0.0.0.0/0 interface ethernet1 gateway 211.144.149.1 preference 20 set route 172.16.4.0/24 interface ethernet2 gateway 172.16.1.1 preference 20 set route 172.16.6.1/24 interface ethernet2 gateway 172.16.1.1 preference 20 set route 172.16.7.1/24 interface ethernet2 gateway 172.16.1.1 preference 20 set route 172.16.5.0/24 interface ethernet2 gateway 172.16.1.1 preference 20 set route 172.16.8.0/24 interface ethernet2 gateway 172.16.1.1 preference 20 set route 172.16.10.0/24 interface ethernet2 gateway 172.16.1.1 preference 20 set route 172.16.11.0/24 interface ethernet2 gateway 172.16.1.1 preference 20 set route 172.16.13.0/24 interface ethernet2 gateway 172.16.1.1 preference 20 set route 172.16.14.0/24 interface ethernet2 gateway 172.16.1.1 preference 20 set route 172.16.15.0/24 interface ethernet2 gateway 172.16.1.1 preference 20 set route 192.168.0.0/19 interface tunnel.1 set route 10.10.10.0/24 interface tunnel.2 exit

set vrouter \exit

set vrouter \exit

5.3. Netscreen5GT

set clock timezone 7

set vrouter trust-vr sharable set vrouter \exit

set vrouter \

unset auto-route-export exit

set service \protocol tcpsrc-port 10001-10001 dst-port 10001-10001 set service \set service \set service \set service \set service \set service \set service \set service \set service \set service \

set service \set service \set service \set service \

set service \set service \set service \set auth-server \

set auth-server \set auth default auth server \set auth radius accounting port 1646

set admin name \

set admin password \set admin port 8000 set admin auth timeout 10 set admin auth server \set admin format dos

set zone \set zone \set zone \set zone id 100 \

set zone \

set zone \set zone \set zone %unset zone \set zone \set zone %unset zone \

unset zone \

set zone \set zone \set zone \set zone \set zone \

set zone \set zone \set zone \set zone \set zone \set interface \set interface \set interface %unset interface vlan1 ip

set interface trust ip 192.168.20.253/24 set interface trust nat

set interface untrustip 61.51.110.10/32 set interface untrustnat

set interface tunnel.1 ip unnumbered interface untrust

set interface untrust bandwidth egress mbw 2000 ingress mbw 2000 unset interface vlan1 bypass-others-ipsec unset interface vlan1 bypass-non-ip set interface trust ip manageable set interface untrustip manageable set interface untrust manage ping set interface untrust manage ssh set interface untrust manage telnet set interface untrust manage web

set interface untrust monitor track-ipip 192.168.0.8 unset interface untrust monitor track-ip dynamic

set interface untrustvipuntrust 80 \set interface untrustvipuntrust 873 \set interface untrustvipuntrust 199 \set interface untrustvipuntrust 5222 \set pak-poll p1queue pak-threshold 96 set pak-poll p2queue pak-threshold 32 set flow tcp-mss

set flow all-tcp-mss 1304 unset flow no-tcp-seq-check

set flow tcp-syn-check

set pki authority default scep mode \set pki x509 default cert-path partial

set dns host dns1 202.106.0.20 src-interface untrust set dns host dns2 0.0.0.0 set dns host dns3 0.0.0.0 set dns proxy

set dns proxy enable

set dns server-select domain testoff outgoing-interface untrust primary-server 202.106.0.20

set address \

set address \set address \set address \set address \set address \set address \set address \set address \set address \

set address \set address \

百度搜索“77cn”或“免费范文网”即可找到本站免费阅读全部范文。收藏本站方便下次阅读，免费范文网，提供经典小说教育文库NetscreenJuniper防火墙VPN配置说明(3)在线全文阅读。