当前位置: 主页 > 网络知识 > CISCO技术 > SmartHammerG503防火墙配置方法

SmartHammerG503防火墙配置方法

时间:2009-11-16来源:互联网 点击:
上面配置里也有了正常状态下升级的步骤和如何更改启动文件的配置,大家在遇到问题时可以参考。
--------------------------------------------------------------------------------
Harbour Networks Ltd.
version G503_1.3.1_0051
Build 0051 at 17:00:16-at-06-09-2005.
SmartHammer>
SmartHammer> en
SmartHammer>
SmartHammer# dir disk0
mount: Mounting /dev/disk0 on /mnt failed: No such device
disk0 don‘t exist or disk0 is damaged or disk0 isn‘t formated
SmartHammer# reboot
Are you sure to reboot the system? [Y/N]y
System will reboot now!
SmartHammer#
BIOS version 1.1 and CPLD version 1.1 for SmartHammer G503
Build Date: Sat Jul 15 18:51:38 HKT 2006
Copyright (c) Harbour Networks Limited All rights reserved.
eth2: Link speed: Unknown
Loader:elf Filesys:fat Dev:flash0 File:hsos.img Optionsnull)
Loading......
Good. Loading finished!
Closing network.
Starting program .....
SiByte BCM1250 B2 (SB1 rev 2)
Board type: SiByte SmartHammer
Password: ge0: Link is Down
ge1: Link is Down
ge2: Link is Down

Password:
Harbour Networks Ltd.
version G503_1.3.1_0051
Build 0051 at 17:00:16-at-06-09-2005.
SmartHammer>
SmartHammer>
SmartHammer>
SmartHammer> en
Password:
SmartHammer#
SmartHammer# format disk0在港湾的防火墙中,disk0即代表CF卡,在使用前,必须使用Format命令先格式化CF卡)
SmartHammer#
SmartHammer#
SmartHammer#
SmartHammer# dir disk0:
124922k bytes total (124922k bytes free)
SmartHammer#
SmartHammer#
SmartHammer#
SmartHammer#
SmartHammer# copy flash0: disk0:
srcfile is empty!
SmartHammer# copy flash0:/hsos.img disk0:/hsos.img(从Flash中直接copy hsos.img文件不成功,具体原因还需要港湾公司给予解释)
error srcplace in mips64
SmartHammer# dir flash0
14921228 Sep 14 10:22 hsos.img
32686k bytes total (9926k bytes free)
SmartHammer# dir disk0:
124922k bytes total (124922k bytes free)
SmartHammer#
SmartHammer# copy tftp://192.168.98.100/hsos.img disk0:(利用tftp将HSOS文件载入CF卡中)
...............
14921228 bytes have received, we will move it to appropriate place!
It maybe last a few minites,please waiting...
[OK]
SmartHammer#
SmartHammer#
SmartHammer# dir disk0:(查看一下CF卡中文件的内容和大小)
14921228 Sep 14 12:26 hsos.img
124922k bytes total (110350k bytes free)
SmartHammer#
SmartHammer#
SmartHammer#
SmartHammer# set boot system disk0:hsos.img(设置系统启动时加载的文件,disk0代表从CF卡上加载系统文件)
SmartHammer# show system boot
HSOS_IMAGE disk0:hsos.img
HSOS_CONFIG “nvram”
HSOS_OPTIONS “noconfig”
SmartHammer#
SmartHammer#
SmartHammer#
SmartHammer#
SmartHammer#
SmartHammer# reboot
Are you sure to reboot the system? [Y/N](重新启动系统,看到不同的软件版本了吧!)
System will reboot now!
SmartHammer#
BIOS version 1.1 and CPLD version 1.1 for SmartHammer G503
Build Date: Sat Jul 15 18:51:38 HKT 2006
Copyright (c) Harbour Networks Limited All rights reserved.
eth2: Link speed: 1000BaseT FDX
Loader:elf Filesys:fat Dev:disk0 File:hsos.img Optionsnull)
Loading......
Good. Loading finished!
Closing network.
Starting program .....
SiByte BCM1250 B2 (SB1 rev 2)
Board type: SiByte SmartHammer
Password: ge0: Link is Down
ge1: Link is Down
ge2: Link is Down
ge2: Link speed: 1000BaseT FDX

Password:
Harbour Networks Limited.
version G503_1.3_0157(由原来的1.3.1_0051变成较老的版本1.3_0157)
Build 0157 at Mon Nov 22 09:49:21 CST 2004.
SmartHammer>
SmartHammer>
SmartHammer>
SmartHammer>
--------------------------------------------------------------------------------
使CFE在引导系统软件时忽略配置文件。这样就连密码一起清楚了,以缺省配置进入后,用show startup-config再把原来的配置恢复了。
进入CFE模块,用“ctrl + B” 进CFE模块
harbour>setenv HSOS_OPTIONS “noconfig” 设置启动时不加载配置
这样就会以出厂设置进入,然后注意在进入系统后,再把配置改回来,要不你做的配置虽然保存了,但还是不会在你启动时加载,用命令
SmartHammer# set boot options config
--------------------------------------------------------------------------------
SmartHammer1# show runn
Building configuration...
Current configuration:
hostname SmartHammer1
line tty
login
!
!
no service password-encryption
!
password 8 ca6f986f681
enable password 8 7dace19bafc8e4168dbeee58a0a6bd
!
no ip service inspect
!
ip-group eq
!
interface lo
!
interface ge0
ip address 218.x.x.x/27
ip security-level 80
ip nat internet
!
interface ge1
ip address 192.168.251.254/30
ip security-level 100
ip nat ftp
!
interface ge2
!
ip route 0.0.0.0/0 218.x.x.x
ip route 192.168.0.0/16 192.168.251.253
!
http-filter
!
ip inspect max 500000
ip inspect max 500000 tcp
ip inspect max 100000 udp
ip inspect maxincomplete high 20000 tcp
ip inspect maxincomplete low 10000 tcp
ip inspect one-minute high 20000 tcp
ip inspect one-minute low 10000 tcp
ip inspect max flow 100 src list 10
!
access-list 10 permit ip any any
access-list firewall permit tcp any any x.x.x.x telnet
access-list firewall permit icmp any any
access-list firewall permit tcp any any 192.168.251.254 telnet
access-list mail permit icmp any any
access-list mail permit tcp any any any ftp
access-list mail permit tcp any any any pop3
access-list mail permit tcp any any any smtp
!
ip access-group ge0 ge1 mail
!
block bittorrent timeout 65535 hours
local ip access-group firewall
!
ip nat internet source static 192.168.1.3 218.x.x.x
ip nat internet source list 10 interface
!
user admin secret ca6f986f681 admin
!
SmartHammer1#
站长资讯网
.
分页: [1] [2] [3]
TAG: 防火墙 华为smarthammerg530
推荐内容最近更新人气排行
关于我们 | 友情链接 | 网址推荐 | 常用资讯 | 网站地图 | RSS | 留言