知乎专栏 | 多维度架构 |
set policy id 94 from "Untrust" to "DMZ" "Any" "Any" "ANY" permit log set policy id 94 disable set policy id 94 exit set policy id 95 from "DMZ" to "Untrust" "Any" "Any" "ANY" nat src permit log set policy id 95 exit set policy id 96 from "Trust" to "DMZ" "Any" "Any" "ANY" permit set policy id 96 exit set policy id 97 from "DMZ" to "Trust" "Any" "Any" "ANY" permit log set policy id 97 exit
未设置nat src,DMZ 将不能访问外网