网神安全网关配置方法

本文格式为Word版，下载可任意编辑——网神安全网关配置方法1.将计算机IP地址设置为4，掩码，网关5，连接在VPN网关的FE1口。

2.开启VPN网关配套光盘中的AdminCert目录，双击证书文件SecGateAdmin.p12，弹出如下窗口。

按提醒进行安装，密码为“123456〞，其它按默认即可安装成功。

3.在IE浏览器中输入：5:8889，密码为firewall进入VPN网关管理界面。

4.进入VPN网关管理界面。

5.选择系统配置——》导入导出。点击“浏览〞，选择配置文件fwconfig.txt。fwconfig.txt如下：

#hardwareversion:SecGate3600-F3(SJW79)A#softwareversion:6#hostname:SecGate

#serialnumber:f6f335072669bb05defaddrdelalladdr

defaddraddDMZ/comment\

defaddraddTrust/comment\defaddraddUntrust/comment\

vpnsetdefaultprekeyPleaseInputPrekeyikelifetime28800ipseclifetime3600vpnstatusonvpnbakoffvpnon

vpnaddremotestaticmainpsknamexianaddr18prekeyPleaseInputPrekeyike3des-sha1-dh5,aes-sha1-dh5initiateonobeyoffnat_tonikelifetime28800dpddelay0dpdtimeout0

vpnaddtunnelnamexian_qianxianlocal3remotexianauthespipsecaes128-md5,3des-sha1pfsondh_group5ipseclifetime3600proxy_localipproxy_localmaskproxy_remoteipproxy_remotemaskantisynfloodfe1200antiicmpfloodfe11000antipingofdeathfe1800antiudpfloodfe11000antipingsweepfe110antitcpportscanfe110antiudpportscanfe110

antisynfloodfe2200antiicmpfloodfe21000antipingofdeathfe2800antiudpfloodfe21000antipingsweepfe210antitcpportscanfe210antiudpportscanfe210antisynfloodfe3200antiicmpfloodfe31000antipingofdeathfe3800antiudpfloodfe31000antipingsweepfe310antitcpportscanfe310antiudpportscanfe310antisynfloodfe4200antiicmpfloodfe41000antipingofdeathfe4800antiudpfloodfe41000antipingsweepfe410antitcpportscanfe410antiudpportscanfe410

sysifsetfe1speedautomtu1500ipmacoffmacpolicypermitmoderoutesrouteofflogoffantioffnonipdenyidsblockoffvlanoff

sysifsetfe2speedautomtu1500ipmacoffmacpolicypermitmoderoutesrouteofflogoffantioffnonipdenyidsblockoffvlanoff

sysifsetfe3speedautomtu1500ipmacoffmacpolicypermitmoderoutesrouteofflogoffantioffnonipdenyidsblockoffvlanoff

sysifsetfe4speedautomtu1500ipmacoffmacpolicypermitmoderoutesrouteofflogoffantioffnonipdenyidsblockoffvlanoff

sysipaddfe15pingoffadminonadminpingontracerouteon

sysipaddfe4328pingonadminonadminpingofftracerouteoff

sysipaddfe300pingonadminonadminpingofftracerouteoffvrrpbunchdelay10

routeadddrouteany

mngglobalsetcpu80mem80fs80rcomm\\

crypt\

mngglobaladdsnmpip18mngglobalon

logsrvset18514udpmngacctsetadminpassword\mngacctmultion

mngacctfailtime5blocktime30period120dnssetsysnameSecGateipcftcheckofflongconnset1800

statetableudp20icmp5

statetableovertimeestablish1800syn120dnsrelaysetauto

rdwebsrcaddranydstaddranyrdwebdstport80

vpnsetdhcpactiveoffdhcpserverinterfacelotimeoutsetweb600

bandwidthaddp2p_bandpriority3minbw60maxbw160comment\建议仅用于P2P带宽限制\

ftpactiveport20keepofftcpmssset1460

defsvcsetftpftp21defsvcseth323h3231720defsvcsetsqlnetsqlnet1521defsvcsetsipsip5060defsvcsetrtsprtsp554defsvcsetmmsmms1755defsvcsetpptppptp1723defsvcsetgkgk1719defsvcsettftptftp69

defsvcsetftpcomment\文件传输协议\defsvcseth323comment\服务\

defsvcsetsqlnetcomment\数据库网络连接\defsvcsetsipcomment\基于sip协议的动态服务\defsvcsetrtspcomment\服务\defsvcsetmmscomment\服务\

defsvcsetpptpcomment\点到点隧道协议的动态服务\defsvcsetgkcomment\网守服务\defsvcsettftpcomment\协议\

defsvcseticmpicmpcomment\服务\

defsvcsetpingicmptype8comment\请求\defsvcsetpongicmptype0comment\回应\

defsvcsettcpprototcpanyanycomment\协议的所有服务\defsvcsetudpprotoudpanyanycomment\协议的所有服务\defsvcsetgreproto47comment\封装协议\

defsvcsetespproto50comment\加密认证协议\defsvcsetahproto51comment\加密协议\

defsvcsetvrrpproto112comment\负载均衡协议\defsvcsetsshprototcpany22comment\远程加密登录\defsvcsettelnetprototcpany23comment\远程登录协议\defsvcsetsmtpprototcpany25comment\邮件发送服务\defsvcsethttpprototcpany80comment\服务\

defsvcsetpop3prototcpany110comment\邮件接收服务\defsvcsetntpprototcpany123comment\时间服务器服务\

defsvcsetnetbiosprototcpany137prototcpany139protoudpany137protoudpany138comment\文件共享\

defsvcsetdhcpprotoudpany67:68prototcpany67:68comment\bootp\

defsvcsethttpsprototcpany443comment\服务\

defsvcsetpptp_serverprototcpany1723proto47comment\点到点隧道协议（用于防火墙作为PPTP服务器）\

defsvcsetdnsprototcpany53protoudpany53comment\域名解析服务\

defsvcsetsnmpprotoudpany161comment\简单网络管理协议\

defsvcsetsnmptrapprotoudpany162comment\发送服务\defsvcsetsyslogprotoudpany514comment\日志传输协议\

defsvcsetoicqcprotoudpany4000comment\客户端开启端口\defsvcsetoicqsprotoudpany8000comment\服务器开启端口\

defsvcsetsecgate_authprototcpany9998protoudpany9998comment\安全网关用户认证\

defsvcsetsecgate_globalprototcpany161protoudpany161comment\安全网关集中管理\

defsvcsetsecgate_httpsprototcpany8889prototcpany8888comment\安全网关WEB管理\

defsvcsetsecgate_ha_confprototcpany9223protoudpany9455comment\安全网关HA功能配置同步服务\defsvcsetvirus_blasterprototcpany135:139protoudpany135:139prototcpany4444protoudpany69comment\冲击波影响端口\

defsvcsetvirus_sasserprototcpany445prototcpany1025prototcpany1068prototcpany5554prototcpany9995:9996protoudpany9995:9996comment\震荡波影响端口\

defsvcsetvirus_sqlwormprotoudpany1434comment\蠕虫影响端口\defsvcsetpcanywhereprototcpany5631:5632protoudpany5631:5632comment\

defsvcsetlotusnoteprototcpany1352protoudpany1352comment\notes\

defsvcsetikeprotoudpany500protoudpany4500comment\密钥交换协议\

defsvcsetl2tpprotoudpany1701comment\其次层隧道协议\defsvcsetthunderprototc