SLTechnology News&Howtos › Network Security ›

Huawei USG Firewall NAT

Shulou Source: shulou.com Published: 2022-06-01 06:11:42 10月04日 Update

Topology:

Basic Configuration Refer to Huawei Firewall USG Basic Configuration (http://692344.blog.51cto.com/682344/1607629)

Here are only the client and server configurations:

Firewall Configuration:

Policy Configuration:

Monitor FTP configuration (FTP is a dynamic protocol):

Testing:

----------------------------------

If FTP uses a special port, configure it as follows:

acl number 2001

rule 5 permit source 192.168.1.100 0

port-mapping ftp port 2121 acl 2001

ip service-set newftp type object

service 0 protocol tcp description 2121

firewall interzone dmz untrust

detect ftp

policy interzone dmz untrust inbound

policy 0

action permit

policy service service-set http

policy service service-set newftp

policy destination 192.168.1.100 0