Eudemon200E-X V300R001

 1. Crea un virtual firewall vf1

 [Eudemon] ip vpn-instance vf1

 [Eudemon-vpn-vf1] route-distinguisher 100:1

 [Eudemon-vpn-vf1]quit

 2. Relaciona las inside interfaces y outside interfaces al virtual firewall

 [Eudemon]interface gi0/0/0

 [Eudemon-GigabitEthernet0/0/0]ip binding vpn-instance vf1   \\ enlazar la interfaz al firewall virtual primero y luego asigna un ip address

 [Eudemon-GigabitEthernet0/0/0]ip add 192.168.1.1 24

 [Eudemon-GigabitEthernet0/0/0]q

 [Eudemon]interface gi0/0/1

 [Eudemon-GigabitEthernet0/0/1]ip binding vpn-instance vf1

 [Eudemon-GigabitEthernet0/0/1]ip add 1.1.1.1 24

 [Eudemon-GigabitEthernet0/0/1]q

 3. Adiciona interfaces a las security zones en la virtual firewall vf1

 [Eudemon]firewall zone vpn-instance vf1 trust

 [Eudemon-zone-trust-vf1]add interface giga0/0/0

 [Eudemon-zone-trust-vf1]q

 [Eudemon]firewall zone vpn-instance vf1 untrust

 [Eudemon-zone-untrust-vf1]add interface giga0/0/1

 [Eudemon-zone-untrust-vf1]q

 4. Configura interzone filtering para vf1 permita paquetes originados en la trust zone y pasen a la untrust zone 

 [Eudemon]policy interzone vpn-instance vf1 trust untrust outbound

 [Eudemon-policy-interzone-trust-untrust-vf1-outbound]policy 0

 [Eudemon-policy-interzone-trust-untrust-vf1-outbound-0]policy source 192.168.1.0 0.0.0.255

 [Eudemon-policy-interzone-trust-untrust-vf1-outbound-0]action permit

 [Eudemon-policy-interzone-trust-untrust-vf1-outbound-0]q

 [Eudemon-policy-interzone-trust-untrust-vf1-outbound]q

 5. Configura una política de Outbound NAT que permita a los usuarios de la trust zone acceder a la untrust zone usando 1.1.1.2 al 1.1.1.4 address

 [Eudemon]nat adress-group 1 1.1.1.2 1.1.1.4 vpn-instance vf1

 [Eudemon]nat-policy interzone vpn-instance vf1 trust untrust outbound

 [Eudemon-nat-policy-interzone-trust-untrust-vf1-outbound]policy 0

 [Eudemon-nat-policy-interzone-trust-untrust-vf1-outbound-0]policy source 192.16.1.0 0.0.0.255

 [Eudemon-nat-policy-interzone-trust-untrust-vf1-outbound-0]action source-nat

 [Eudemon-nat-policy-interzone-trust-untrust-vf1-outbound-0]address-group 1

 [Eudemon-nat-policy-interzone-trust-untrust-vf1-outbound-0]q

 [Eudemon-nat-policy-interzone-trust-untrust-vf1-outbound]q