当前位置：网站首页>Configure security policy on ENSP

Configure security policy on ENSP

2022-04-22 05:24:00 【A clever lamb】

Preface

I was in win10 Operating on a virtual machine , utilize ensp The tool is easy to build a network environment
Before operation IP The address is configured on each device （ On the side of each device IP This is the of the device IP, Such as 192.168.5.2/24 yes pc1 Of IP Address ）
Configuration ideas ：

Insert picture description here

To configure pc The machine IP

Insert picture description here

Configure firewall

Set firewall password
Insert picture description here

1. Configure the firewall interface address

Insert picture description here

2. Distinguish trusted networks from untrusted networks through security zones

Configure security zones , Assign the interface to the corresponding security area

g1/0/0 --trust
g1/0/1 --untrust
Insert picture description here

View configuration results

Insert picture description here
Be careful ： If you want to delete the interface of a security zone , You should enter the area first , And then you type in undo add int Name of the interface to be deleted
（ It is similar to the operation of adding interfaces , Just add... To the front undo）

Configure security policy

192.168.5.2 and 192.168.5.3 You can't ping through 1.1.1.1,
192.168.5.0 The rest of the pc Sure ping through （ Configure first. You cannot ping common , Otherwise it will have no effect ）
Insert picture description here