Witam.
Czy router CheckPoint SBX-166LHGE-2 da się skonfigurować w ten sposób, aby wszystkie porty (WAN, DMZ/WAN2, 4xLAN) były jednym switchem? Router jest już skonfigurowany jako switch na portach LAN.
Tak wygląda plik konfiguracyjny routera:
Czy router CheckPoint SBX-166LHGE-2 da się skonfigurować w ten sposób, aby wszystkie porty (WAN, DMZ/WAN2, 4xLAN) były jednym switchem? Router jest już skonfigurowany jako switch na portach LAN.
Tak wygląda plik konfiguracyjny routera:
# Configuration script
# Gateway MAC: 00:08:da:51:81:53
# firmware version: 4.5.57x
# Device settings
set device productkey <> hostname ""
# WAN (Internet) Settings
set net wan mode none gateway undefined address undefined netmask undefined password "" username "" pptpserver 10.0.0.138 pptpclientip 10.200.1.1 pptpclientmask 255.0.0.0 pptpservice "" pppoeservice "" mtu automatic externalip undefined phonenumber "" clonedmac undefined usedhcp enabled staticwins disabled staticdns disabled disabled true dns1 undefined dns2 undefined wins undefined uprate unlimited downrate unlimited connectondemand disable idletimeout 1
# Secondary WAN (Internet) Settings
set net wan2 mode none gateway undefined address undefined netmask undefined password "" username "" pptpserver undefined pptpclientip undefined pptpclientmask undefined pptpservice "" pppoeservice "" mtu automatic externalip undefined phonenumber "" clonedmac undefined usedhcp enabled staticwins disabled staticdns disabled disabled true dns1 undefined dns2 undefined wins undefined uprate unlimited downrate unlimited connectondemand disable idletimeout 0
# Local Area Network Settings
set net lan hidenat enabled address 192.168.1.253 netmask 255.255.255.0 dhcpserver disabled dhcprange automatic dhcprelayip undefined
# High Availability
set net lan ha mode disabled virtualip undefined
# DMZ Network Settings
set net dmz mode enabled hidenat enabled address 192.168.253.1 netmask 255.255.255.0 dhcpserver enabled dhcprange automatic dhcprelayip undefined
# High Availability
set net dmz ha mode disabled virtualip undefined
# Classes of Service
clear qos classes
add qos classes name Default uplimit unlimited downlimit unlimited weight 10 delayclass normal dscp 0
add qos classes name Urgent uplimit unlimited downlimit unlimited weight 15 delayclass interactive dscp 0
add qos classes name Important uplimit unlimited downlimit unlimited weight 20 delayclass normal dscp 0
add qos classes name "Low Priority" uplimit unlimited downlimit unlimited weight 5 delayclass bulk dscp 0
# Firewall settings
set fw exposedhost undefined level low
# Firewall rules
clear fw rules
# HTTP and HTTPS servers
set fw servers web hostip undefined enconly false
# FTP server
set fw servers ftp hostip undefined enconly false
# Telnet server
set fw servers telnet hostip undefined enconly false
# POP3 server
set fw servers pop3 hostip undefined enconly false
# SMTP server
set fw servers smtp hostip undefined enconly false
# PPTP and GRE servers
set fw servers pptp hostip undefined enconly false
# IKE and ESP servers
set fw servers ipsec hostip undefined enconly false
# NBT services
set fw servers nbt hostip undefined enconly false
# Netmeeting/H.323
set fw servers h323 hostip undefined enconly false
# VPN server settings
set vpn server mode disabled bypassnat enabled bypassfw disabled
# VPN Sites
clear vpn sites
# Users
clear users
set users 1 name admin password <haslo> adminaccess readwrite vpnaccess false filteroverride true
# Static Routes
clear routes
# Managment settings
set smp server "" gatewayid "" registrationkey "" connect disabled
# Email antivirus service settings
set antivirus mode disabled
# Mail Antivirus protocols
set antivirus protocols pop3 enabled smtp disabled
# Web filtering service settings
set webfilter mode disabled
# Web filtering categories
set webfilter categories gambling allow adult block criminal block hate block violence block drugs block unknown allow
# Secure Desk service settings
set securedesk level off
# Syslog Logging
set syslog address undefined port 0
# HTTPS management settings
set https mode any iprange undefined
# Network Objects
clear netobj
# Dialup modem settings
set dialup type Custom speed 57600 dialmode tone custominit ""
# RADIUS Servers
clear radius servers
# RADIUS user permissions
set radius permissions adminaccess none vpnaccess false filteroverride false
# END Configuration script