<?xml version="1.0" encoding="UNICODE" ?>
<topo version="1.2.00.510">
    <devices>
        <dev id="BA0087F5-AD81-4c74-8CA9-BE797BCD183F" name="PC3" poe="0" model="PC" settings=" -simpc_ip 172.16.1.2  -simpc_mask 255.255.255.0  -simpc_gateway 172.16.1.1  -simpc_mac 54-89-98-48-37-AC  -simpc_mc_dstip 0.0.0.0  -simpc_mc_dstmac 00-00-00-00-00-00  -simpc_dns1 0.0.0.0  -simpc_dns2 0.0.0.0  -simpc_ipv6 ::  -simpc_prefix 128  -simpc_gatewayv6 ::  -simpc_dhcp_state 0  -simpc_dhcpv6_state 0  -simpc_dns_auto_state 0  -simpc_igmp_version 1  -simpc_group_ip_start 0.0.0.0  -simpc_src_ip_start 0.0.0.0  -simpc_group_num 0  -simpc_group_step 0  -simpc_src_num 0  -simpc_src_step 0  -simpc_type MODE_IS_INCLUDE " system_mac="54-89-98-48-37-AC" com_port="0" bootmode="0" cx="487.000000" cy="330.000000" edit_left="514" edit_top="384">
            <slot number="slot17" isMainBoard="1">
                <interface sztype="Ethernet" interfacename="Ethernet" count="1" />
            </slot>
        </dev>
        <dev id="5D9FE71E-149F-4345-9C67-3D70331BD9EA" name="PC-admin" poe="0" model="PC" settings=" -simpc_ip 192.168.0.2  -simpc_mask 255.255.255.0  -simpc_gateway 192.168.0.1  -simpc_mac 54-89-98-3B-15-57  -simpc_mc_dstip 0.0.0.0  -simpc_mc_dstmac 00-00-00-00-00-00  -simpc_dns1 0.0.0.0  -simpc_dns2 0.0.0.0  -simpc_ipv6 ::  -simpc_prefix 128  -simpc_gatewayv6 ::  -simpc_dhcp_state 0  -simpc_dhcpv6_state 0  -simpc_dns_auto_state 0  -simpc_igmp_version 1  -simpc_group_ip_start 0.0.0.0  -simpc_src_ip_start 0.0.0.0  -simpc_group_num 0  -simpc_group_step 0  -simpc_src_num 0  -simpc_src_step 0  -simpc_type MODE_IS_INCLUDE " system_mac="54-89-98-3B-15-57" com_port="0" bootmode="0" cx="106.000000" cy="308.000000" edit_left="132" edit_top="362">
            <slot number="slot17" isMainBoard="1">
                <interface sztype="Ethernet" interfacename="Ethernet" count="1" />
            </slot>
        </dev>
        <dev id="A69412C6-E98B-4a58-B4C9-BDD61CFB9918" name="PC1" poe="0" model="PC" settings=" -simpc_ip 192.168.10.2  -simpc_mask 255.255.255.0  -simpc_gateway 192.168.10.1  -simpc_mac 54-89-98-0D-2B-26  -simpc_mc_dstip 0.0.0.0  -simpc_mc_dstmac 00-00-00-00-00-00  -simpc_dns1 0.0.0.0  -simpc_dns2 0.0.0.0  -simpc_ipv6 ::  -simpc_prefix 128  -simpc_gatewayv6 ::  -simpc_dhcp_state 0  -simpc_dhcpv6_state 0  -simpc_dns_auto_state 0  -simpc_igmp_version 1  -simpc_group_ip_start 0.0.0.0  -simpc_src_ip_start 0.0.0.0  -simpc_group_num 0  -simpc_group_step 0  -simpc_src_num 0  -simpc_src_step 0  -simpc_type MODE_IS_INCLUDE " system_mac="54-89-98-0D-2B-26" com_port="0" bootmode="0" cx="239.000000" cy="318.000000" edit_left="266" edit_top="372">
            <slot number="slot17" isMainBoard="1">
                <interface sztype="Ethernet" interfacename="Ethernet" count="1" />
            </slot>
        </dev>
        <dev id="F4AC89F6-C61A-4fce-9613-FDB716538319" name="PC2" poe="0" model="PC" settings=" -simpc_ip 200.1.1.2  -simpc_mask 255.255.255.0  -simpc_gateway 200.1.1.1  -simpc_mac 54-89-98-EF-38-CD  -simpc_mc_dstip 0.0.0.0  -simpc_mc_dstmac 00-00-00-00-00-00  -simpc_dns1 0.0.0.0  -simpc_dns2 0.0.0.0  -simpc_ipv6 ::  -simpc_prefix 128  -simpc_gatewayv6 ::  -simpc_dhcp_state 0  -simpc_dhcpv6_state 0  -simpc_dns_auto_state 0  -simpc_igmp_version 1  -simpc_group_ip_start 0.0.0.0  -simpc_src_ip_start 0.0.0.0  -simpc_group_num 0  -simpc_group_step 0  -simpc_src_num 0  -simpc_src_step 0  -simpc_type MODE_IS_INCLUDE " system_mac="54-89-98-EF-38-CD" com_port="0" bootmode="0" cx="558.000000" cy="93.000000" edit_left="585" edit_top="147">
            <slot number="slot17" isMainBoard="1">
                <interface sztype="Ethernet" interfacename="Ethernet" count="1" />
            </slot>
        </dev>
        <dev id="C2A982C7-31B6-4b22-95C9-2DE3150AE802" name="FW1" poe="0" model="USG6000V" settings="" system_mac="00-E0-FC-89-6C-8C" com_port="2000" bootmode="0" cx="242.000000" cy="85.000000" edit_left="269" edit_top="139">
            <slot id="1">
                <interface category="Ethernet" type="GE" slotIndex="0" cardIndex="0" interfaceIndex="0" />
                <interface category="Ethernet" type="GE" slotIndex="1" cardIndex="0" interfaceIndex="0" />
                <interface category="Ethernet" type="GE" slotIndex="1" cardIndex="0" interfaceIndex="1" />
                <interface category="Ethernet" type="GE" slotIndex="1" cardIndex="0" interfaceIndex="2" />
                <interface category="Ethernet" type="GE" slotIndex="1" cardIndex="0" interfaceIndex="3" />
                <interface category="Ethernet" type="GE" slotIndex="1" cardIndex="0" interfaceIndex="4" />
                <interface category="Ethernet" type="GE" slotIndex="1" cardIndex="0" interfaceIndex="5" />
                <interface category="Ethernet" type="GE" slotIndex="1" cardIndex="0" interfaceIndex="6" />
            </slot>
        </dev>
    </devices>
    <lines>
        <line srcDeviceID="C2A982C7-31B6-4b22-95C9-2DE3150AE802" destDeviceID="BA0087F5-AD81-4c74-8CA9-BE797BCD183F">
            <interfacePair lineName="Copper" srcIndex="3" srcBoundRectIsMoved="0" srcBoundRect_X="299.535522" srcBoundRect_Y="142.535538" srcOffset_X="0.000000" srcOffset_Y="0.000000" tarIndex="0" tarBoundRectIsMoved="0" tarBoundRect_X="483.464478" tarBoundRect_Y="326.464478" tarOffset_X="0.000000" tarOffset_Y="0.000000" />
        </line>
        <line srcDeviceID="5D9FE71E-149F-4345-9C67-3D70331BD9EA" destDeviceID="C2A982C7-31B6-4b22-95C9-2DE3150AE802">
            <interfacePair lineName="Copper" srcIndex="0" srcBoundRectIsMoved="0" srcBoundRect_X="155.484726" srcBoundRect_Y="298.131653" srcOffset_X="0.000000" srcOffset_Y="0.000000" tarIndex="0" tarBoundRectIsMoved="1" tarBoundRect_X="246.515274" tarBoundRect_Y="148.868347" tarOffset_X="-59.000000" tarOffset_Y="-8.000000" />
        </line>
        <line srcDeviceID="C2A982C7-31B6-4b22-95C9-2DE3150AE802" destDeviceID="F4AC89F6-C61A-4fce-9613-FDB716538319">
            <interfacePair lineName="Copper" srcIndex="2" srcBoundRectIsMoved="0" srcBoundRect_X="312.169922" srcBoundRect_Y="113.092911" srcOffset_X="0.000000" srcOffset_Y="0.000000" tarIndex="0" tarBoundRectIsMoved="1" tarBoundRect_X="541.830078" tarBoundRect_Y="118.907089" tarOffset_X="-45.000000" tarOffset_Y="3.000000" />
        </line>
        <line srcDeviceID="A69412C6-E98B-4a58-B4C9-BDD61CFB9918" destDeviceID="C2A982C7-31B6-4b22-95C9-2DE3150AE802">
            <interfacePair lineName="Copper" srcIndex="0" srcBoundRectIsMoved="1" srcBoundRect_X="266.555969" srcBoundRect_Y="301.819824" srcOffset_X="7.000000" srcOffset_Y="0.000000" tarIndex="1" tarBoundRectIsMoved="1" tarBoundRect_X="268.444031" tarBoundRect_Y="155.180191" tarOffset_X="2.000000" tarOffset_Y="13.000000" />
        </line>
    </lines>
    <shapes />
    <txttips>
        <txttip left="346" top="72" right="418" bottom="89" content="200.1.1.1" fontname="Consolas" fontstyle="0" editsize="100" txtcolor="-16777216" txtbkcolor="-7278960" charset="1" />
        <txttip left="489" top="462" right="546" bottom="479" content="DMZ区域" fontname="Consolas" fontstyle="0" editsize="100" txtcolor="-16777216" txtbkcolor="-7278960" charset="1" />
        <txttip left="385" top="130" right="472" bottom="147" content="untrust区域" fontname="Consolas" fontstyle="0" editsize="100" txtcolor="-16777216" txtbkcolor="-7278960" charset="1" />
        <txttip left="496" top="413" right="598" bottom="430" content="172.16.1.2/24" fontname="Consolas" fontstyle="0" editsize="100" txtcolor="-16777216" txtbkcolor="-7278960" charset="1" />
        <txttip left="102" top="383" right="212" bottom="400" content="192.168.0.2/24" fontname="Consolas" fontstyle="0" editsize="100" txtcolor="-16777216" txtbkcolor="-7278960" charset="1" />
        <txttip left="91" top="432" right="163" bottom="449" content="Trust区域" fontname="Consolas" fontstyle="0" editsize="100" txtcolor="-16777216" txtbkcolor="-7278960" charset="1" />
        <txttip left="826" top="63" right="1293" bottom="645" content="实验步骤：&#x0D;&#x0A;防火墙密码：1234%678&#x0D;&#x0A;1.配置防火墙G1/0/1、G1/0/2接口IP，三台PC的IP&#x0D;&#x0A;2.测试三台PC与防火墙接口之间的连通性(默认是不通的)&#x0D;&#x0A;&#x0D;&#x0A;  PC-admin是可以ping通所有防火墙接口iP&#x0D;&#x0A;&#x0D;&#x0A;3.将G0/0/0,G1/0/0加入到trust区域&#x0D;&#x0A;   firewall zone trust&#x0D;&#x0A;        add interface G0/0/0&#x0D;&#x0A;        add interface G1/0/0&#x0D;&#x0A;4.将G1/0/1加入到untrust区域&#x0D;&#x0A;   firewall zone untrust&#x0D;&#x0A;        add interface G1/0/1&#x0D;&#x0A;5.将G1/0/2加入到dmz区域&#x0D;&#x0A;&#x0D;&#x0A;6.配置防火墙G1/0/1允许ping&#x0D;&#x0A;   interface  G1/0/1&#x0D;&#x0A;       service-manage  ping  permit&#x0D;&#x0A;7.测试从PC2 ping 200.1.1.1  (通)&#x0D;&#x0A;  从FW1 ping  200.1.1.2  是否通？&#x0D;&#x0A;&#x0D;&#x0A;8.配置 “Trust”区域可以访问“Untrust”区域&#x0D;&#x0A;    security-policy&#x0D;&#x0A;       rule name t_u&#x0D;&#x0A;            source-zone trust&#x0D;&#x0A;            destination-zone untrust&#x0D;&#x0A;            action permit&#x0D;&#x0A;9.测试PC1 ping PC2      &#x0D;&#x0A;  测试PC2 ping PC1&#x0D;&#x0A;     " fontname="Consolas" fontstyle="0" editsize="120" txtcolor="-16777216" txtbkcolor="-7278960" charset="1" />
        <txttip left="571" top="66" right="685" bottom="86" content="200.1.1.2/24" fontname="Consolas" fontstyle="0" editsize="120" txtcolor="-16777216" txtbkcolor="-7278960" charset="1" />
        <txttip left="320" top="179" right="415" bottom="199" content="172.16.1.1" fontname="Consolas" fontstyle="0" editsize="120" txtcolor="-16777216" txtbkcolor="-7278960" charset="1" />
        <txttip left="115" top="160" right="220" bottom="180" content="192.168.0.1" fontname="Consolas" fontstyle="0" editsize="120" txtcolor="-16777216" txtbkcolor="-7278960" charset="1" />
        <txttip left="252" top="388" right="393" bottom="408" content="192.168.10.2/24" fontname="Consolas" fontstyle="0" editsize="120" txtcolor="-16777216" txtbkcolor="-7278960" charset="1" />
        <txttip left="250" top="435" right="336" bottom="455" content="Trust区域" fontname="Consolas" fontstyle="0" editsize="120" txtcolor="-16777216" txtbkcolor="-7278960" charset="1" />
        <txttip left="829" top="648" right="1260" bottom="799" content="10.配置 “Trust”和“Untrust”区域可以访问“DMZ”区域&#x0D;&#x0A;    security-policy&#x0D;&#x0A;       rule name t_d&#x0D;&#x0A;            source-zone trust&#x0D;&#x0A;            source-zone untrust&#x0D;&#x0A;            destination-zone dmz&#x0D;&#x0A;            action permit&#x0D;&#x0A;11. 测试PC1、PC2 ping PC3 " fontname="Consolas" fontstyle="0" editsize="120" txtcolor="-16777216" txtbkcolor="-7278960" charset="1" />
    </txttips>
</topo>
