配置zone间策略

Kyon

a)使用mqc定义策略
config#ip access-list extended dmz-external
permit````
config#class-map tyep inspect dmz-external
     cmap#match access-group dmz-external
         cmap#     match prtocol icmp
        config#          policy-map type inspect any-external
        class dmz-extrnal
        inspect
                                          internal1-internal2
b)挂接zone间策略
config#zone-pair security d-e source dmz destination external
                          [name]    [szone]
config-sec-zone-pair#serice-policy type inspect any-external
Easyinlab Welcome

庄歪