H3C SecPath Firewall Series Configuration Guides(V7)-6W402-book_CHM.rar(31.83 MB)
H3C SecPath Firewall Series Configuration Guides(V7)-6W402-book.pdf(28.31 MB)
- Released At: 29-08-2023
- Page Views:
- Downloads:
- Table of Contents
- Related Documents
-
About the H3C SecPath firewalls Comware 7 configuration guides
The H3C SecPath firewalls Comware 7 configuration guides describe the software features and configuration procedures for the Comware 7-based H3C SecPath firewalls listed in "Applicable hardware and software versions."
Applicable hardware and software versions
To obtain software version information for a device, use the display version command in any view on the device. The configuration guides use the XXXXP22 versions as examples to illustrate feature configuration. For information about feature changes in other software versions, see the release notes for your device.
The configuration guides are applicable to the hardware and software versions in the following table:
Series | Model | Software version |
F5000 series | F5030, F5030-6GW, F5060, F5080, F5000-M, F5000-A, F5000-V30 | F9628P22 |
F5010, F5020-GM, F5020, F5040, F5000-C, F5000-S | F9342P22 | |
F5000-AI series | F5000-AI-20, F5000-AI-40 | F9628P22 |
F10X0 series | F1005, F1010 | F9536P22 |
F1020, F1020-GM, F1030, F1030-GM, F1050, F1060, F1070, F1070-GM, F1070-GM-L, F1080, F1000-V70 | F9345P22 | |
F1090 | F8601P22 | |
F1000-AK series | F1000-AK108, F1000-AK109, F1000-AK110, F1000-AK115, F1000-AK120, F1000-AK125, F1000-AK710, F1000-AK1110, F1000-AK1120, F1000-AK1130, F1000-AK1140 | F9536P22 |
F1000-AK130, F1000-AK135, F1000-AK140, F1000-AK145, F1000-AK150, F1000-AK155, F1000-AK160, F1000-AK165, F1000-AK170, F1000-AK175, F1000-AK180, F1000-AK185, F1000-AK711, F1000-GM-AK370, F1000-GM-AK380, F1000-AK1212, F1000-AK1222, F1000-AK1232, F1000-AK1312, F1000-AK1322, F1000-AK1332 | F9345P22 | |
F1000-AK1414, F1000-AK1424, F1000-AK1434, F1000-AK1514, F1000-AK1524, F1000-AK1534, F1000-AK1614 | F8601P22 | |
F1000-AI-X0 series | F1000-AI-20, F1000-AI-30, F1000-AI-50 | F9345P22 |
F1000-AI-60, F1000-AI-70, F1000-AI-80, F1000-AI-90 | F8601P22 | |
F1000-L series | F1003-L, F1005-L, F1010-L | F9536P22 |
SecBlade III FW modules | LSU3FWCEA0, LSUM1FWCEAB0, LSX1FWCEA1 | R8241P22 |
SecBlade IV NGFW modules | LSPM6FWD | R8535P22 |
LSXM1FWDF1, LSUM1FWDEC0, IM-NGFWX-IV, LSQM1FWDSC0, LSWM1FWD0, LSQM2FWDSC0 | R8536P22 | |
Virtual firewalls | vFW1000, vFW2000 | E1171P22 |
Configuration guide content
Table 1 lists features included in each configuration guide. Support for the features depends on the device model.
Table 1 Configuration guide content
Configuration guide | Content |
Fundamentals Configuration Guide | Describes how to use the command line interface of the device, log in to and set up the device, and use the basic management functions. This guide includes: · CLI (command line interface overview and how to use the CLI) · RBAC · Logging in to the firewall devices · FTP and TFTP · File system management · Configuration file management · Software upgrade · ISSU · Automatic configuration · Device management · Tcl · Python · License |
Virtual Technologies Configuration Guide | Describes the fundamentals and configuration of virtual technologies features. This guide includes: · IRF · IRF (applicable only to vFW) · Context · Reth interface and redundancy group |
Security Configuration Guide | Describes the fundamentals and configuration of security features. This guide includes: · Security zone · Security policy · ASPF · Session management · IP source guard · Object group · Object policy · AAA · User identification · Password control · Portal · MAC authentication · IPoE · Public key configuration · PKI · SSH · SSL · Connection limit · Attack detection and prevention · Server connection detection · ARP attack protection · ND attack defense · uRPF · IP-MAC binding · APR · Keychain · Crypto engine · IP reputation · MAC address learning through a Layer 3 device |
DPI Configuration Guide | Describes the fundamentals and configuration of deep packet inspection (DPI) features. DPI inspects application layer payloads to protect the network against application layer malicious activities. This guide includes: · DPI overview · DPI engine · IPS · URL filtering · Data filtering · File filtering · Anti-virus · Data analysis center · Proxy policy · WAF · IP reputation |
NAT Configuration Guide | Describes the fundamentals and configuration of NAT features. This guide includes: · NAT · AFT · NAT66 |
VPN Configuration Guide | Describes the fundamentals and configuration of VPN features. This guide includes: · SSL VPN · IPsec, IKE, and IKEv2 · Tunneling · GRE · L2TP · ADVPN |
Internet Access Behavior Management Configuration Guide | Describes the fundamentals and configuration of Internet access behavior management features. This guide includes: · Bandwidth management · Application audit and management · NetShare control |
Load Balancing Configuration Guide | Describes the fundamentals and configuration of load balancing features. |
High Availability Configuration Guide | Describes high availability technologies and features available on the device for failure detection and failover. |
Interface Configuration Guide | Describes the fundamentals and configuration of various interfaces. This guide includes: · Bulk interface · Ethernet interface · Loopback, null, and inloopback interfaces |
Layer 2—LAN Switching Configuration Guide | Describes the fundamentals and configuration of Layer 2 technologies and features used on a LAN switched network. This guide includes: · MAC address table · Ethernet link aggregation · VLAN · VLAN termination · Spanning tree · LLDP · Layer 2 forwarding |
Layer 2—WAN Access Configuration Guide | Describes the fundamentals and configuration of Layer 2 WAN access features. This guide includes: · 3G and 4G modem management · PPP |
Layer 3—IP Services Configuration Guide | Describes IP addressing (including static and dynamic IPv4 and IPv6 address assignment), network performance optimization, ARP, and interoperation between IPv4 and IPv6. This guide includes: · IP addressing · IP forwarding basic settings and load sharing · Fast forwarding · ARP · IPv6 basics · IPv6 fast forwarding · DHCP · DHCPv6 · DNS · IP performance optimization · Multi-CPU packet distribution · WAAS · Adjacency table |
Layer 3—IP Routing Configuration Guide | Describes the routing technologies for IPv4 and IPv6 networks of different sizes, route filtering, route control, and policy based routing. This guide includes: · IP routing basics · Static routing · IPv6 static routing · RIP · RIPng · OSPF · OSPFv3 · IS-IS · BGP · Policy-based routing · IPv6 policy-based routing · Routing policy · Guard route |
ACL and QoS Configuration Guide | Describes how to classify traffic with ACLs, and allocate network resources and manage congestions with QoS technologies to improve network performance and network use efficiency. You can use ACLs to help other function modules (such as QoS and IP routing) classify or filter traffic. This guide includes: · ACL · QoS · Time range |
IP Multicast Configuration Guide | Describes the fundamentals and configuration of IP multicast features. This guide includes: · Multicast overview · Multicast routing and forwarding · IGMP · PIM |
Network Management and Monitoring Configuration Guide | Describes features that help you manage and monitor your network, for example, manage system events, collect traffic statistics, sample packets, assess network performance, and test network connectivity. This guide includes: · Information center · Flow log · Fast log output · NetStream · Mirroring · Packet capture · System maintenance and debugging · NQA · NTP · EAA · Process monitoring and maintenance · NETCONF · CWMP · SNMP · RMON · Event MIB · BFD · Track · Interface collaboration · Interface backup · Monitor Link · Smart Link · Process placement |
Service Chain Configuration Guide | Describes the fundamentals and configuration of service chains. |
VPN Instance Configuration Guide | Describes the fundamentals and configuration of VPN instances. |
VXLAN Configuration Guide | Describes the fundamentals and configuration of VXLAN features. |
Acronyms | Lists the significant acronyms in the configuration guides. |