FS的博客

Appearance

路由器接入 ​

TIP

Date: 2026-04-27

Updated: 2026-04-27

防火墙接入 ​

确认web管理地址在哪个端口 ​

bash
[]display interface brief

加入安全域 ​

bash
[H3C] security-zone name Management
[H3C-security-zone-Management] import interface GigabitEthernet 1/0/0
[H3C-security-zone-Management] quit

配置安全策略 ​

bash
[H3C] security-policy ip
[H3C-security-policy-ip] rule name Allow_Web
[H3C-security-policy-ip-0-Allow_Web] action pass
[H3C-security-policy-ip-0-Allow_Web] source-zone Management
[H3C-security-policy-ip-0-Allow_Web] destination-zone Local
[H3C-security-policy-ip-0-Allow_Web] service https
[H3C-security-policy-ip-0-Allow_Web] service http
[H3C-security-policy-ip-0-Allow_Web] quit

开启HTTP及HTTPS ​

bash
[H3C] ip https enable
[H3C] ip http enable

创建web权限账户 ​

bash
[H3C] local-user admin class manage
[H3C-luser-manage-admin] password simple admin@123
[H3C-luser-manage-admin] service-type https http
[H3C-luser-manage-admin] authorization-attribute user-role network-admin
[H3C-luser-manage-admin] quit