Question

关于华三硬件防火墙 SecPath f100-c-g的配置问题

淘得一台二手f100-c-g，出厂配置如下：
#
version 5.20, Release 5142P02
#
sysname H3C
#
undo voice vlan mac-address 0000-0000-0000
#
domain default enable system
#
port-security enable
#
undo alg all
#
password-recovery enable
#
vlan 1
#
domain system
access-limit disable
state active
idle-cut disable
self-service-url disable
#
pki domain default
crl check disable
#
user-group system
group-attribute allow-guest
#
local-user admin
password cipher $c$3$m3jArNGw6tD/jV/Z7nKqCE1pGeIbpbmg
authorization-attribute level 3
service-type telnet
service-type web
#
cwmp
undo cwmp enable
#
interface NULL0
#
interface GigabitEthernet0/0
port link-mode route
ip address 192.168.0.1 255.255.255.0
#
interface GigabitEthernet0/1
port link-mode route
#
interface GigabitEthernet0/2
port link-mode route
#
interface GigabitEthernet0/3
port link-mode route
#
interface GigabitEthernet0/4
port link-mode route
#
vd Root id 1
#
zone name Management id 0
priority 100
import interface GigabitEthernet0/0
zone name Local id 1
priority 100
zone name Trust id 2
priority 85
zone name DMZ id 3
priority 50
zone name Untrust id 4
priority 5
switchto vd Root
zone name Management id 0
ip virtual-reassembly
zone name Local id 1
ip virtual-reassembly
zone name Trust id 2
ip virtual-reassembly
zone name DMZ id 3
ip virtual-reassembly
zone name Untrust id 4
ip virtual-reassembly
#
load xml-configuration
#
load tr069-configuration
#
user-interface con 0
user-interface vty 0 4
authentication-mode scheme
#
return
奇怪的是，恢复了出厂之后，无论是直接连接默认G0/0的管理页面，还是直接配置端口IP来接入网络，都没办法通讯，烦请各路高手指点，不胜感激！

若以下回答无法解决问题，邀请你更新回答

Answer 1

要把接口加入安全区域
不同区域间需要做安全策略

追问

就是说，防火墙与路由器网控器之类的不一样？没有设置端口所在的域和域间包过滤，防火墙是默认阻拦通讯的？

追答

是的，接口是没加域的
域间默认是deny的

追问

非常感谢！