拓扑如下:
PC1为DMZ区,内网只有一台交换机,现在需要分端口给服务区用。
核心侧服务区配置vlan隔开内网和服务区。
配置如下:
防火墙配置:
[USG6000V1]dis current-configuration
!Software Version V500R001C10
#
sysname USG6000V1
#
undo l2tp sendaccm enable
l2tp domain suffix-separator @
#
ip address-set 192.168.100 type object
address 0 192.168.100.0 mask 24
#
ip address-set 192.168.10 type group
address 0 192.168.10.0 mask 24
#
time-range worktime
period-range 08:00:00 to 18:00:00 working-day
#
aaa
authentication-scheme default
authentication-scheme admin_local
authentication-scheme admin_radius_local
authentication-scheme admin_hwtacacs_local
authentication-scheme admin_ad_local
authentication-scheme admin_ldap