H3C SecPath F1800-A Operation Manual page 400

Operation Manual - Security Defence
H3C SecPath F1800-A Firewall
PC
PC
Figure 2-4 The firewall attack defence configuration
3) Configuration procedures
# Configure the Ethernet 0/0/0 on the firewall.
[SecPath] interface Ethernet 0/0/0
[SecPath-Ethernet0/0/0] ip address 192.168.1.1 255.255.255.0
# Configure the Ethernet 0/1/0 on the firewall.
[SecPath] interface Ethernet 0/1/0
[SecPath-Ethernet0/1/0] ip address 202.1.0.1 255.255.0.0
# Configure the Ethernet 1/0/0 on the firewall.
[SecPath] interface Ethernet 1/0/0
[SecPath-Ethernet1/0/0] ip address 10.0.0.1 255.0.0.0
# Add the Ethernet 0/0/0 to the trust zone.
[SecPath] firewall zone trust
[SecPath-zone-trust] add interface Ethernet 0/0/0
# Add the Ethernet 0/1/0 to the untrust zone.
[SecPath] firewall zone untrust
[SecPath-zone-untrust] add interface Ethernet 0/1/0
# Add the Ethernet 1/0/0 to the DMZ zone.
[SecPath] firewall zone dmz
[SecPath-zone-dmz] add interface Ethernet 1/0/0
# Enable the Land attack defence.
[SecPath-zone-dmz] quit
[SecPath] firewall defend land enable
PC
SecPath
Ethernet
192.168.1.0/24
Ethernet
10.110.0.0/8
Server
10.110.1.1
202.1.0.0/16
Ethernet
6-48
Chapter 2 Security Policy
Internet