- Sep 27 Wed 2017 15:41
-
Fortigate 5.4 SSL VPN SOP and Trouble&shooting
- May 19 Thu 2016 10:40
-
Cisco Mirror Port (Monitor Port)
- Apr 07 Thu 2016 15:06
-
Ruckus 發出奇怪SSID (island-XXXXX)
- Dec 16 Wed 2015 10:32
-
Paloalto基本設定

基本中的基本...以免連上網都沒辦法._."
1. 用MGT port登入,預設IP:192.168.1.1 預設帳密: admin//admin
2. Network-Virtual Wires-移除預設值
3. Network-Zones-新增兩個Zones “L3-WAN” “L3-LAN”
4. Network-Interfaces-選擇Wan(Untrust)介面: ex: ethernet1/2
設定Interface Type為Layer3
設定Virual Route為default
設定Security Zone為L3-WAN
設定WAN的固定IP
設定Management Profile (該介面允許的功能)
5. 同理,新增LAN Port,設定的IP即為連到Paloalto的LAN-IP
6. Network-Virtual Routes-Default
Destination為0.0.0.0/0
Interface為WAN Port
Next Hop為WAN端Gateway
7. Network-DHCP
8. Policies-Security-刪除預設policy
Add-General-Name
-Source-Source Zone-L3 Lan
-Destination-Destination Zone-L3 WAN
-Actions-Action Setting-Allow
9. Policies-NAT
Add-General-Name
-Original Packet
-Translated Packet
- Dec 16 Wed 2015 10:11
-
Extreme常用MA指令
- Dec 16 Wed 2015 10:08
-
Cisco常用MA指令
- Sep 09 Wed 2015 16:31
-
Fortigate 140D
- Aug 21 Fri 2015 16:57
-
juniper ex2200
- Jul 22 Wed 2015 17:13
-
VMware Converter (Linux to VM)
- Jul 16 Thu 2015 17:08
-
Cisco使用非原廠Gbic
- Jul 16 Thu 2015 17:04
-
Cisco建立Trunk
- Jul 16 Thu 2015 16:55
-
VMware vMotion 6.0
