網(wǎng)神安全網(wǎng)關配置方法

本文格式為Word版，下載可任意編輯——網(wǎng)神安全網(wǎng)關配置方法1.將計算機IP地址設置為4，掩碼，網(wǎng)關5，連接在VPN網(wǎng)關的FE1口。

2.開啟VPN網(wǎng)關配套光盤中的AdminCert目錄，雙擊證書文件SecGateAdmin.p12，彈出如下窗口。

按提醒進行安裝，密碼為“123456〞，其它按默認即可安裝成功。

3.在IE瀏覽器中輸入：5:8889，密碼為firewall進入VPN網(wǎng)關管理界面。

4.進入VPN網(wǎng)關管理界面。

5.選擇系統(tǒng)配置——》導入導出。點擊“瀏覽〞，選擇配置文件fwconfig.txt。fwconfig.txt如下：

#hardwareversion:SecGate3600-F3(SJW79)A#softwareversion:6#hostname:SecGate

#serialnumber:f6f335072669bb05defaddrdelalladdr

defaddraddDMZ/comment\

defaddraddTrust/comment\defaddraddUntrust/comment\

vpnsetdefaultprekeyPleaseInputPrekeyikelifetime28800ipseclifetime3600vpnstatusonvpnbakoffvpnon

vpnaddremotestaticmainpsknamexianaddr18prekeyPleaseInputPrekeyike3des-sha1-dh5,aes-sha1-dh5initiateonobeyoffnat_tonikelifetime28800dpddelay0dpdtimeout0

vpnaddtunnelnamexian_qianxianlocal3remotexianauthespipsecaes128-md5,3des-sha1pfsondh_group5ipseclifetime3600proxy_localipproxy_localmaskproxy_remoteipproxy_remotemaskantisynfloodfe1200antiicmpfloodfe11000antipingofdeathfe1800antiudpfloodfe11000antipingsweepfe110antitcpportscanfe110antiudpportscanfe110

antisynfloodfe2200antiicmpfloodfe21000antipingofdeathfe2800antiudpfloodfe21000antipingsweepfe210antitcpportscanfe210antiudpportscanfe210antisynfloodfe3200antiicmpfloodfe31000antipingofdeathfe3800antiudpfloodfe31000antipingsweepfe310antitcpportscanfe310antiudpportscanfe310antisynfloodfe4200antiicmpfloodfe41000antipingofdeathfe4800antiudpfloodfe41000antipingsweepfe410antitcpportscanfe410antiudpportscanfe410

sysifsetfe1speedautomtu1500ipmacoffmacpolicypermitmoderoutesrouteofflogoffantioffnonipdenyidsblockoffvlanoff

sysifsetfe2speedautomtu1500ipmacoffmacpolicypermitmoderoutesrouteofflogoffantioffnonipdenyidsblockoffvlanoff

sysifsetfe3speedautomtu1500ipmacoffmacpolicypermitmoderoutesrouteofflogoffantioffnonipdenyidsblockoffvlanoff

sysifsetfe4speedautomtu1500ipmacoffmacpolicypermitmoderoutesrouteofflogoffantioffnonipdenyidsblockoffvlanoff

sysipaddfe15pingoffadminonadminpingontracerouteon

sysipaddfe4328pingonadminonadminpingofftracerouteoff

sysipaddfe300pingonadminonadminpingofftracerouteoffvrrpbunchdelay10

routeadddrouteany

mngglobalsetcpu80mem80fs80rcomm\\

crypt\

mngglobaladdsnmpip18mngglobalon

logsrvset18514udpmngacctsetadminpassword\mngacctmultion

mngacctfailtime5blocktime30period120dnssetsysnameSecGateipcftcheckofflongconnset1800

statetableudp20icmp5

statetableovertimeestablish1800syn120dnsrelaysetauto

rdwebsrcaddranydstaddranyrdwebdstport80

vpnsetdhcpactiveoffdhcpserverinterfacelotimeoutsetweb600

bandwidthaddp2p_bandpriority3minbw60maxbw160comment\建議僅用于P2P帶寬限制\

ftpactiveport20keepofftcpmssset1460

defsvcsetftpftp21defsvcseth323h3231720defsvcsetsqlnetsqlnet1521defsvcsetsipsip5060defsvcsetrtsprtsp554defsvcsetmmsmms1755defsvcsetpptppptp1723defsvcsetgkgk1719defsvcsettftptftp69

defsvcsetftpcomment\文件傳輸協(xié)議\defsvcseth323comment\服務\

defsvcsetsqlnetcomment\數(shù)據(jù)庫網(wǎng)絡連接\defsvcsetsipcomment\基于sip協(xié)議的動態(tài)服務\defsvcsetrtspcomment\服務\defsvcsetmmscomment\服務\

defsvcsetpptpcomment\點到點隧道協(xié)議的動態(tài)服務\defsvcsetgkcomment\網(wǎng)守服務\defsvcsettftpcomment\協(xié)議\

defsvcseticmpicmpcomment\服務\

defsvcsetpingicmptype8comment\請求\defsvcsetpongicmptype0comment\回應\

defsvcsettcpprototcpanyanycomment\協(xié)議的所有服務\defsvcsetudpprotoudpanyanycomment\協(xié)議的所有服務\defsvcsetgreproto47comment\封裝協(xié)議\

defsvcsetespproto50comment\加密認證協(xié)議\defsvcsetahproto51comment\加密協(xié)議\

defsvcsetvrrpproto112comment\負載均衡協(xié)議\defsvcsetsshprototcpany22comment\遠程加密登錄\defsvcsettelnetprototcpany23comment\遠程登錄協(xié)議\defsvcsetsmtpprototcpany25comment\郵件發(fā)送服務\defsvcsethttpprototcpany80comment\服務\

defsvcsetpop3prototcpany110comment\郵件接收服務\defsvcsetntpprototcpany123comment\時間服務器服務\

defsvcsetnetbiosprototcpany137prototcpany139protoudpany137protoudpany138comment\文件共享\

defsvcsetdhcpprotoudpany67:68prototcpany67:68comment\bootp\

defsvcsethttpsprototcpany443comment\服務\

defsvcsetpptp_serverprototcpany1723proto47comment\點到點隧道協(xié)議（用于防火墻作為PPTP服務器）\

defsvcsetdnsprototcpany53protoudpany53comment\域名解析服務\

defsvcsetsnmpprotoudpany161comment\簡單網(wǎng)絡管理協(xié)議\

defsvcsetsnmptrapprotoudpany162comment\發(fā)送服務\defsvcsetsyslogprotoudpany514comment\日志傳輸協(xié)議\

defsvcsetoicqcprotoudpany4000comment\客戶端開啟端口\defsvcsetoicqsprotoudpany8000comment\服務器開啟端口\

defsvcsetsecgate_authprototcpany9998protoudpany9998comment\安全網(wǎng)關用戶認證\

defsvcsetsecgate_globalprototcpany161protoudpany161comment\安全網(wǎng)關集中管理\

defsvcsetsecgate_httpsprototcpany8889prototcpany8888comment\安全網(wǎng)關WEB管理\

defsvcsetsecgate_ha_confprototcpany9223protoudpany9455comment\安全網(wǎng)關HA功能配置同步服務\defsvcsetvirus_blasterprototcpany135:139protoudpany135:139prototcpany4444protoudpany69comment\沖擊波影響端口\

defsvcsetvirus_sasserprototcpany445prototcpany1025prototcpany1068prototcpany5554prototcpany9995:9996protoudpany9995:9996comment\震蕩波影響端口\

defsvcsetvirus_sqlwormprotoudpany1434comment\蠕蟲影響端口\defsvcsetpcanywhereprototcpany5631:5632protoudpany5631:5632comment\

defsvcsetlotusnoteprototcpany1352protoudpany1352comment\notes\

defsvcsetikeprotoudpany500protoudpany4500comment\密鑰交換協(xié)議\

defsvcsetl2tpprotoudpany1701comment\其次層隧道協(xié)議\defsvcsetthunderprototc