H3C Technologies H3C SecPath F1000-E - Manual (Page 55)

48
Figure 35 Network diagram
Configuration procedure
1. Enable FTP ALG:
By default, the FTP ALG function is enabled, and this step is optional.
a. Select Firewall > ALG from the navigation tree.
The Application Layer Inspection tab appears, as shown in
Figure 36 .
b. Select ftp in the Optional Application Protocols list and click the << button to add it to the
Selected Application Protocols list.
c. Click OK.
Figure 36 Configuring FTP ALG
2. Configure an ACL:
# Create a basic ACL:
a. Select Firewall > ACL from the navigation tree and then click Add.
b. Create ACL 2001 as shown in Figure 37 :
Enter 2001 in the ACL Number field.
Select Config as the match order.
c. Click Apply.
Host FTP server
Local: 192.168.1.2
Global: 5.5.5.10
SecPath
Internet
GE0/1
5.5.5.1/24 192.168.1.1/24