云计算专业防火墙混合模式应用实验：
实验要求如下：
1.防火墙和路由器运行OSPF
2.防火墙可以Ping通主机和服务器
3.PC1和PC2可以互访
4.PC1和PC2可以访问FTP,但FTP不能主动访问PC1和PC2
5.设备名都要配置为自己名字，IP地址和vlan规划与学号有关。
拓扑图如下：

配置命令如下：

AR1
system-view
sysname sq
int g0/0/1
ip address 172.16.6.254 255.255.255.0
int g0/0/2
ip address 172.16.16.254 255.255.255.0

ospf 1
area 0
network 172.16.6.0 0.0.0.255
area 6
network 172.16.16.0 0.0.0.255

FW3：
Aa123456
system-view
sysname sq
vlan 6
int vlan 6
ip address 192.168.6.254 255.255.255.0
service-manage ping permit

int g1/0/1
portswitch
port link-type access
port default vlan 6
quit


firewall zone name IT
set priority 64
add int vlan 6
quit
firewall zone name sales
set priority 65
add int g1/0/2
quit
firewall zone name server
set priority 30
add int g1/0/0
int g1/0/2
ip address 172.16.6.253 24
int g1/0/0
ip address 6.6.6.254 24

FW3：
system-view
ospf 1
area 0
network 172.16.6.0 0.0.0.255
area 2
network 192.168.6.0 0.0.0.255
area 4
network 6.6.6.0 0.0.0.255
quit

security-policy
default action permit
rule name local-all
source-zone local
destination-zone IT server sales
service icmp
action permit
quit

rule name IT-sales
source-zone IT sales
destination-zone sales IT
service icmp
action permit
quit


rule name IT-sales-server
source-zone IT sales
destination-zone server
service ftp
action permit

PC机与Server的配置：



菜菜的代码，希望能够帮助到你哟！