绿盟下一代防火墙典型部署手册.doc

文档版本： V6.0.0 (2013-03-26)绿盟下一代防火墙典型部署手册© 2018 绿盟科技■ 版权声明本文中出现的任何文字叙述、文档格式、插图、照片、方法、过程等内容，除另有特别注明，版权均属北京神州绿盟信息安全科技股份有限公司（简称绿盟科技）所有，受到有关产权及版权法保护任何个人、机构未经绿盟科技的书面授权许可，不得以任何方式复制或引用本文的任何片断 目录绿盟下一代防火墙典型部署手册目录前言 ......................................................................................................................................................11 透明部署 ..........................................................................................................................................31.1 点到点虚拟线部署 ..........................................................................................................................................31.2 多点二层接入部署 ..........................................................................................................................................71.3 Trunk 穿越部署 ...............................................................................................................................................132 路由部署 ........................................................................................................................................172.1 边界网关 ........................................................................................................................................................172.2 ISP 链路负载均衡 ...........................................................................................................................................272.3 非对称路由 ....................................................................................................................................................413 混合部署 ........................................................................................................................................504 HA 部署 ..........................................................................................................................................634.1 虚拟线主备 ....................................................................................................................................................634.2 路由主备 ........................................................................................................................................................714.3 路由主主 ........................................................................................................................................................825 VPN 部署 .......................................................................................................................................995.1 SSL VPN 客户端到网关 .................................................................................................................................995.2 SSL VPN 网关到网关 ...................................................................................................................................1065.3 IPSec VPN 网关到网关 ................................................................................................................................113A 出厂参数 .....................................................................................................................................121A.1 设备带外管理口初始设置 ..........................................................................................................................121A.2 引擎初始用户 ..............................................................................................................................................121A.2.1 Web 操作员初始帐号 .........................................................................................................................121A.2.2 Web 审计员初始帐号 .........................................................................................................................121A.2.3 串口管理员初始帐号 ........................................................................................................................121A.3 绿盟安全中心管理员初始帐号 ..................................................................................................................121A.4 串口通信参数 ..............................................................................................................................................122A.5 CLI 管理员初始帐号 ...................................................................................................................................122绿盟下一代防火墙典型部署手册版权所有 © 绿盟科技 i V6.0.0Error! Unknown document property name. (2013-03-26)B 安全模板 .....................................................................................................................................123B.1 入侵检测模板 ..............................................................................................................................................123B.2 URL 过滤模板 ..............................................................................................................................................125B.3 防病毒模板 ..................................................................................................................................................128B。