目
录
项目1 防火墙基础知识....................................................................
1
1.1 知识引入............................................................................................
1
1.2 任务1：安装支持防火墙仿真环境的 eNSP 软件 ..........................
5
1.3 任务2：用 Wireshark 捕获常见的TCP/IP 协议栈报文...............13
习题...........................................................................................................25
思政聚焦：增强服务意识 .......................................................................25
项目2 防火墙登录方式..................................................................26
2.1 知识引入..........................................................................................26
2.2 任务1：通过Console 控制接口登录防火墙................................29
2.3 任务2：通过Web 方式登录防火墙..............................................31
2.4 任务3：通过telnet 协议登录防火墙 ............................................39
2.5 任务4：通过SSH 协议登录防火墙..............................................42
习题...........................................................................................................45
思政聚焦：积极践行社会主义核心价值观...........................................45
项目3 防火墙安全策略..................................................................47
3.1 知识引入..........................................................................................47
3.2 任务1：安全区域划分和网络基础配置 .......................................53
3.3 任务2：防火墙策略配置 ...............................................................58
3.4 任务3：需求验证...........................................................................60
习题...........................................................................................................67
思政聚焦：面对腐败零容忍...................................................................68
项目4 防火墙源NAT 策略 ...........................................................69
4.1 知识引入..........................................................................................69
4.2 任务1：用Easy IP 方式访问外网.................................................73
4.3 任务2：用No-PAT 方式访问外网 ................................................78
4.4 任务3：用NAPT 方式访问外网...................................................84
4.5 任务4：用Smart NAT 方式访问外网...........................................91
4.6 任务5：黑洞路由...........................................................................96
习题.........................................................................................................101
思政聚焦：增强绿色可持续发展.........................................................102
Fhqzw.indd 3
2023/12/21 11:07:01
项目5 防火墙NAT server 策略..........................................................................103
5.1 知识引入...................................................................................................................103
5.2 任务1：安全区域划分和网络基础配置 ................................................................107
5.3 任务2：防火墙策略配置 ........................................................................................ 111
5.4 任务3：NAT 策略配置 ...........................................................................................112
5.5 任务4：NAT ALG 、静态路由、黑洞路由配置 ...................................................115
5.6 任务5：验证............................................................................................................115
习题...................................................................................................................................121
思政聚焦：增强社会责任 ................................................................................................122
项目6 双向NAT ..................................................................................................123
6.1 知识引入...................................................................................................................124
6.2 任务1：域间双向NAT（NAT inbound+NAT server）.........................................126
6.3 任务2：域内双向NAT （域内 NAT+NAT server）..............................................136
习题...................................................................................................................................147
思政聚焦：坚韧不拔自主创新....................................................................................147
项目7 双机热备——主备模式............................................................................148
7.1 知识引入...................................................................................................................149
7.2 任务1：仿真拓扑设计............................................................................................153
7.3 任务2：外围设备基础配置....................................................................................155
7.4 任务3：FW1（master 设备）配置........................................................................156
7.5 任务4：FW2（slave 设备）配置...........................................................................160
7.6 任务5：验证............................................................................................................162
习题...................................................................................................................................166
思政聚焦：点亮青春为国争光....................................................................................167
项目8 双机热备——负载分担模式....................................................................168
8.1 知识引入...................................................................................................................169
8.2 任务1：仿真拓扑设计............................................................................................173
8.3 任务2：外围设备基础配置....................................................................................175
8.4 任务3：FW_A 配置 ................................................................................................176
8.5 任务4：FW_B 配置 ................................................................................................180
8.6 任务5：验证............................................................................................................182
习题...................................................................................................................................187
思政聚焦：推进网络强国建设助力中国式现代化....................................................187
项目9 GRE-VPN .................................................................................................189
9.1 知识引入...................................................................................................................189
9.2 任务1：仿真拓扑设计............................................................................................195
9.3 任务2：外围设备基础配置....................................................................................196
9.4 任务3：FW1 配置...................................................................................................197
IV
Fhqzw.indd 4
2023/12/21 11:07:02
9.5 任务4：FW2 配置...................................................................................................200
9.6 任务5：需求验证....................................................................................................202
习题...................................................................................................................................204
思政聚焦：匠心筑梦 技能报国....................................................................................204
项目10 L2TP-VPN ..............................................................................................206
10.1 知识引入 .................................................................................................................206
10.2 任务1：仿真拓扑设计..........................................................................................213
10.3 任务2：物理机和防火墙连通配置 ......................................................................215
10.4 任务3：LNS 配置 .................................................................................................217
10.5 任务4：客户端配置 ..............................................................................................220
10.6 任务5：需求验证..................................................................................................223
习题...................................................................................................................................225
思政聚焦：夯实职业素养助力国家高质量发展 ........................................................225
项目11 IPSec VPN...............................................................................................227
11.1 知识引入 .................................................................................................................227
11.2 任务1：仿真拓扑设计和配置思路 ......................................................................232
11.3 任务2：外围设备基础配置 ..................................................................................233
11.4 任务3：FW_A 配置 ..............................................................................................235
11.5 任务4：FW_B 配置 ..............................................................................................238
11.6 任务5：验证 ..........................................................................................................242
习题...................................................................................................................................245
思政聚焦：弘扬新时代劳动精神实现人生价值 ........................................................245
项目12 GRE over IPSec VPN ............................................................................247
12.1 知识引入 .................................................................................................................247
12.2 任务1：仿真拓扑设计和配置思路 ......................................................................249
12.3 任务2：外围设备基础配置..................................................................................250
12.4 任务3：FW1 配置 .................................................................................................251
12.5 任务4：FW2 配置 .................................................................................................255
12.6 任务5：需求验证..................................................................................................259
习题...................................................................................................................................262
思政聚焦：增强网络安全意识筑牢网络安全屏障....................................................262
参考文献...................................................................................................................264
