H3C-防火墙

ACL:
]acl number 3001 name cs
acl-cs]rule 1 deny icmp source any destination any
acl-cs]rule 5 permit icmp source any destination any icmp-type echo
acl-cs]rule 10 permit icmp source any destination any icmp type echo-reply
除了允许测试用的ping工具所用到的echo和reply以外,不允许任何ICMP报文进入网络
]firewall enable
1/0]firewall packet-filter 3001 inbound/outbound
]firewall default deny/permit         默认情况下,对不匹配已定义的规则的数据,H3C允许其通过

你可能感兴趣的:(防火墙,职场,h3c,休闲)