对应v7平台可以配置安全策略放通acl3001内的流量,现场配置为permit ip,即全部放通。 1.1.12 firewall packet-filter 【命令】 firewall packet-filter { acl-number | name acl-name } { inbound | outbound } [ match-fragments { exactly | normally } ] undo firewall packet-filter { acl-number | na...
A. 在系统视图下: firewall packet-filter 3001 outbound B. 在端口视图下: firewall packet-filter 3001 outbound C. 在系统视图下: firewall packet-filter 3001 inbound D. 在端口视图下: firewall packet-filter 3001 inbound 相关知识点: 试题...
有些设备在出方向是不支持packet-filter 的
packet-filter 3003 outbound nat outbound 3002 address-group 0 nat outbound 3001 nat static enable ipsec apply policy test # acl advanced 3000 rule 0 permit ip source 172.16.0.0 0.0.0.255 destination 172.19.30.0 0.0.0.255 # acl advanced 3001 rule 0 deny ip source 172.16.0.0 0.0.0.255 des...
{acl-number|nameacl-name}outboundcommand on a VLAN interface ofan SPC card, you must remove the packet filter setting, configure thepacket-filter forwarding-layer route outboundor itsundoform, and then re-configure thefirewall packet-filter{acl-number|nameacl-name}outboundcommand on the VLAN ...