防火墙策略配置

#定义服务
Ip service-set TCP_10104 type object
Service 0 protocol tcp destination-port 10104
Ip service-set TCP_10105 type object
Service 0 protocol tcp destination-port 10105
Ip service-set TCP_10106 type object
Service 0 protocol tcp destination-port 10106
Ip service-set TCP_10207 type object
Service 0 protocol tcp destination-port 10207
Ip service-set TCP_10208 type object
Service 0 protocol tcp destination-port 10208
Ip service-set TCP_10301 type object
Service 0 protocol tcp destination-port 10301
Ip service-set TCP_10302 type object
Service 0 protocol tcp destination-port 10302
Ip service-set TCP_10303 type object
Service 0 protocol tcp destination-port 10303
Ip service-set TCP_8090 type object
Service 0 protocol tcp destination-port 8090

#防火墙安全策略

#
rule name dashoudan_2022111010 策略名 大收单-
description 202211090123
source-zone APP_INT_VPC 源地址区域 互联网应用区
destination-zone HX_VPC 目的区域 核心区
source-address 11.24.247.38 32 源地址 真实地址
source-address 11.24.247.39 32 源地址 真实地址
source-address 11.24.247.40 32 源地址 虚拟地址
destination-address 11.24.254.168 32 目的地址 真实地址
destination-address 11.24.254.169 32 目的地址 真实地址
destination-address 11.24.254.170 32 目的地址 真实地址
service TCP_10301 服务 协议 tcp 端口 10301
service TCP_10302 服务 协议 tcp 端口 10302
service TCP_10303 服务 协议 tcp 端口 10303
service icmp 服务生效
policy logging 执行命令
session logging 执行命令
action permit 放行配置
#