ensp防火墙实验

 pc1配置

 pc2配置

 

 防火墙1配置

关闭提示
undo info-center enable

配置接口ip
int g1/0/0
ip add 192.168.10.254 24
service-manage ping permit
int g1/0/1
ip add 1.1.1.1 24
service-manage ping permit

区域添加接口
firewall zone trust 
add int g1/0/0
firewall zone untrust 
add int g1/0/1

添加安全策略
security-policy
rule name t_to_u
source-zone trust
destination-zone untrust 
action permit 
rule name u_to_t	
source-zone untrust 
destination-zone trust 
action permit 
配置静态路由
ip route-static 0.0.0.0 0.0.0.0 1.1.1.254 这一行和下面这两行效果是一样的,写一种即可

#
ip route-static 192.168.20.0 24 1.1.1.254
ip route-static 2.2.2.0 24 1.1.1.254
#

防火墙2配置

关闭提示
undo info-center enable

配置接口ip
int g1/0/0
ip add 2.2.2.2 24
service-manage ping permit
int g1/0/1
ip add 192.168.20.254 24
service-manage ping permit

区域添加接口
firewall zone trust 
add int g1/0/1
firewall zone untrust 
add int  g1/0/0
添加安全策略
security-policy
rule name t_to_u
source-zone trust
destination-zone untrust 
action permit 
rule name u_to_t	
source-zone untrust 
destination-zone trust 
action permit 
配置静态路由
ip route-static 0.0.0.0 0.0.0.0 2.2.2.254 这一行和下面这两行效果是一样的,写一种即可

#
ip route-static 192.168.10.0 24 2.2.2.254
ip route-static 1.1.1.0 24 2.2.2.254
#

路由器配置

配置接口ip
int g0/0/0
ip add 1.1.1.254 24
int g0/0/1
ip add 2.2.2.254 24

配置静态路由
ip route-static 192.168.10.0 24 1.1.1.1
ip route-static 192.168.20.0 24 2.2.2.2

配置完成后就能实现pc1和pc2互通