H3C Technologies H3C SecPath F5000-S Firewall - Manual (Page 41)

32
Step Command Remarks
Configure dynamic NAT.
Configure an address pool:
nat address-group group-number
start-address end-address [ level level ]
Available in system view.
Configure No-PAT by associating an
ACL with an IP address pool on the
outbound interface for translating only
IP addresses:
nat outbound [ acl-number ]
[ address-group group-number
[ vpn-instance vpn-instance-name ]
[ no-pat ] ] [ track vrrp
virtual-router-id ]
Available in interface view.
Configure a security zone on
the default virtual device (VD).
Enter security zone view:
zone name zone-name [ id zone-id ]
Available in system view.
By default, the default VD has five
security zones: Management (ID =
0), Local (ID = 1), Trust (ID = 2),
DMZ (ID = 3), and Untrust (ID = 4).
Add an interface to the security zone:
import interface interface-type
interface-number [ vlan vlan-list ]
Available in security zone view.
By default, only GigabitEthernet
0/0 is added to the security zone
Management.
Save the running configuration
to the configuration file.
save [ safely ]
Available in any view.
You can specify the file as the
configuration file for the next
startup.
Display the running
configuration.
display current-configuration Available in any view.
Configuring basic settings in the Web interface
1. Select Wizard from the navigation tree.
2. Click the Basic Device Information hyperlink.