网络调试模拟题答案.docVIP

模拟试题参考答案 网络调试（模拟试题） 2010四川省高职计算机网络组建与安全维护技能大赛 ----- ! Version 2.0 aaa-server local type local exit user deng aaa-server local password p+iP5g8Uq+Sv8ibg8/K87yxbb4A1 exit admin user admin password FeU+daOcUEBKbhdAOsPazBjAwC privilege RXW access console access telnet access ssh access http access https exit hostname FW1 admin host any telnet admin host any ssh admin host any http admin host any https ip vrouter trust-vr exit vswitch vswitch1 exit zone trust exit zone untrust ad tear-drop ad ip-spoofing ad land-attack ad ip-option ad ip-option action alarm ad ip-fragment ad winnuke ad port-scan ad syn-flood ad icmp-flood ad ip-sweep ad ping-of-death ad udp-flood ad ip-directed-broadcast exit zone dmz exit zone l2-trust l2 exit zone l2-untrust l2 exit zone l2-dmz l2 exit zone VPNHub exit zone HA exit zone vpn-s exit interface vswitchif1 exit interface ethernet0/0 exit interface ethernet0/1 exit interface ethernet0/2 exit interface ethernet0/3 exit interface ethernet0/4 exit interface tunnel1 exit pki trust-domain trust_domain_default keypair Default-Key enrollment self subject commonName DCFW-1800 subject organization DigitalChina Networks Limited exit scvpn pool vpn-pool address 0 0 netmask dns exit tunnel scvpn deng pool vpn-pool anti-replay 32 allow-multi-logon interface ethernet0/1 split-tunnel-route /30 metric 35 split-tunnel-route /24 metric 35 split-tunnel-route /24 metric 35 split-tunnel-route /24 metric 35 split-tunnel-route /24 metric 35 aaa-server local exit interface ethernet0/0 zone trust ip address 52 manage ssh manage telnet manage ping manage snmp manage http manage https exit interface ethernet0/1 zone untrust ip address 52 manage http manage ping manage https exit interface tunnel1 zone vpn-s ip address tunnel scvpn deng manage ssh manage ping manage https exit ip vrouter trust-vr ip route /0 ip route /17 exit policy from