Huawei AR1200-S - Page 103

firewall defend port-scan enable
firewall defend ip-sweep max-rate 5000
firewall defend ip-sweep blacklist-expire-time 30
firewall defend port-scan max-rate 5000
firewall defend port-scan blacklist-expire-time 30
#
firewall blacklist enable
firewall blacklist 202.39.1.2
#
vlan
100
#
interface Vlanif100
ip address 129.38.1.1 255.255.255.0
zone trust
#
firewall zone trust
priority 15
#
firewall zone untrust
priority 1
#
firewall interzone trust untrust
firewall enable
#
interface Ethernet0/0/0
port link-type access
port default vlan 100
#
interface GigabitEthernet0/0/1
ip address 202.39.2.1 255.255.255.0
zone untrust
#
Huawei AR1200-S Series Enterprise Routers
Configuration Guide - Security 3 Firewall Configuration
Issue 02 (2012-03-30) Huawei Proprietary and Confidential
Copyright © Huawei Technologies Co., Ltd.
89