h3c secpath [f10x0系列][f100-a-g2][f1000-c-g2]防火墙 开局指导书.pdf

H3C SecPath F10X0 系列、F100-A-G2、 F1000-C-G2 产品开局指导书 Copyright © 2015 杭州华三通信技术有限公司 版权所有，保留一切权利 非经本公司书面许可，任何单位和个人不得擅自摘抄、复制本文档内容的部分或全部，并不得以 任何形式传播本文档中的信息可能变动，恕不另行通知 i 目 录 1 特性简述 ··············································································································································· 1 1.1 产品介绍 ··············································································································································· 1 1.2 系统介绍 ··············································································································································· 1 1.2.1 F10X0、F100-A-G2、F1000-C-G2 外观介绍 ··········································································· 1 1.3 F10X0、F100-A-G2、F1000-C-G2 的管理 ·························································································· 2 1.4 防火墙的几个基本概念 ························································································································· 3 1.4.1 安全区域 ···································································································································· 3 1.4.2 会话 ··········································································································································· 3 2 F10X0、F100-A-G2、F1000-C-G2 的版本升级 ···················································································· 4 2.1 F10X0、F100-A-G2、F1000-C-G2 版本升级过程 ··············································································· 4 2.2 热补丁安装 ··········································································································································· 5 2.3 注意事项 ··············································································································································· 5 3 F10X0、F100-A-G2、F1000-C-G2 的远程管理 ···················································································· 6 3.1 F10X0、F100-A-G2、F1000-C-G2 远程管理概述 ··············································································· 6 3.2 F10X0、F100-A-G2、F1000-C-G2 远程telnet管理配置举例 ······························································· 6 3.2.1 组网需求 ···································································································································· 6 3.2.2 配置步骤 ···································································································································· 6 4 F10X0、F100-A-G2、F1000-C-G2 的域间策略基本功能 ····································································· 7 4.1 组网需求 ··············································································································································· 7 4.2 配置思路 ··············································································································································· 7 4.3 配置步骤 ··············································································································································· 7 4.4 注意事项 ··············································································································································· 9 5 F10X0、F100-A-G2、F1000-C-G2 的NAT基本功能 ············································································ 9 5.1 组网需求 ··············································································································································· 9 5.2 配置思路 ··············································································································································· 9 5.3 配置步骤 ··············································································································································· 9 5.4 注意事项 ············································································································································· 10 6 GRE over IPSEC ································································································································ 10 6.1 组网需求 ············································································································································· 10 6.2 配置思路 ············································································································································· 11 6.3 配置步骤 ············································································································································· 11 6.4 注意事项 ············································································································································· 15 ii 7 通过PC（Win7 操作系统）进行L2TP over IPSEC接入 ······································································· 16 7.1 组网需求 ········································································································································。