【问题2】下面是防火墙部分配置,请完善配置。image.pngsystem-view[Huawei] (6) FW[FW]interface GigabitEthernet 1/0/0[FW-GigabitEthernet 1/0/0]ip address 192.168.200.1 30[FW-GigabitEthernet 1/0/0]service-manage enable[FW-GigabitEthernet 1/0/0]service-manage ping permit # 这句命令含义 (7) [FW-GigabitEthernet 1/0/0]quit[FW]interface GigabitEthernet 1/0/1[FW-GigabitEthernet 1/0/1]ip address 192.168.100.254 24[FW-GigabitEthernet 1/0/1]quit[FW]interface GigabitEthernet 1/0/2[FW-GigabitEthernet 1/0/2]ip address 192.168.1.254 24[FW-GigabitEthernet 1/0/2]quit[FW]firewall zone (8) [FW-zone-trust]add interface GigabitEthernet 1/0/2[FW-zone-trust]quit[FW]firewall zone (9) [FW-zone-untrust]add interface GigabitEthernet 1/0/0[FW-zone-untrust]quit[FW]firewall zone (10) [FW-zone-untrust]add interface GigabitEthernet 1/0/1[FW-zone-untrust]quit[FW]security-policy[FW-policy-security]rule name 1[FW-policy-security-rule-1]source-zone trust[FW-policy-security-rule-1]destination-zone untrust[FW-policy-security-rule-1]source address (11) [FW-policy-security-rule-1]destination-address (12) [FW-policy-security-rule-1]action (13) [FW-policy-security-rule-1]quit......
(6)sysname,(7)开启该接口ICMP服务(8)trust(9)untrust (10)dmz(11)192.168.1.0,24或192.168.1.0,255.255.255.0, (12)any(13)permit









