华为防火墙的基本配置

1-防火墙设备管理方式

一、console

user-interface con 0
authentication-mode password
set authentication password cipher 密码
idle-timeout 0 0

二、web

interface GigabitEthernet0/0/0
ip binding vpn-instance default
ip address 192.168.0.1 255.255.255.0
service-manage http permit
service-manage https permit
service-manage ping permit

三、telnet

1.定义用户名
aaa
manager-user 用户名
password cipher 密码
service-type telnet
level 15

2.进入VTY
user-interface vty 0 4
authentication-mode aaa
protocol inbound telnet

3.将telnet服务开启
telnet server enable

4.互联接口下开启telnet服务
interface GigabitEthernet0/0/0
ip binding vpn-instance default
ip address 192.168.0.1 255.255.255.0
service-manage http permit
service-manage https permit
service-manage ping permit
service-manage telnet permit

四、SSH

1.生成密钥对
rsa local-key-pair create