华为防火墙——安全策略、安全转发策略

华为防火墙——安全策略、安全转发策略

华为防火墙——安全策略、安全转发策略

  华为防火墙USG2110 V300R001C00SPCa00 (VRP (R) Software, Version 5.30)：
  firewall packet-filter default permit interzone local trust direction inbound
  firewall packet-filter default permit interzone local trust direction outbound
  firewall packet-filter default permit interzone local untrust direction inbound
  firewall packet-filter default permit interzone local untrust direction outbound
  firewall packet-filter default permit interzone local dmz direction inbound
  firewall packet-filter default permit interzone local dmz direction outbound
  firewall packet-filter default permit interzone trust untrust direction inbound
  firewall packet-filter default permit interzone trust untrust direction outbound
  firewall packet-filter default permit interzone trust dmz direction inbound
  firewall packet-filter default permit interzone trust dmz direction outbound
  firewall packet-filter default permit interzone dmz untrust direction inbound
  firewall packet-filter default permit interzone dmz untrust direction outbound

#
 ip address-set 禁止上互联网 type object
  address 0 10.11.10.21 mask 32

 #
 policy interzone trust untrust outbound
  policy 0
   action deny
   policy logging
   policy source address-set 禁止上互联网
 #

华为防火墙USG6000V2 V500R005C00SPC100：

security-policy
   default action permit

#
security-policy
 default action permit
 rule name a
  source-zone untrust
  destination-zone untrust
  action permit
#