H3C 防火墙测试模板

来源：用户分享时间：2025/8/6 10:44:18 本文由

说明：文章内容仅供预览，部分内容可能不全，需要完整文档或者需要复制内容，请下载word后使用。下载word有问题请添加微信号:xxxxxxx或QQ：xxxxxx 处理（尽可能给您提供完整文档），感谢您的支持与谅解。

测试手册（H3C NGFW）

非经本公司书面许可，任何单位和个人不得擅自摘抄、复制本文档内容的部分或全部，并不得以任何形式传播。本文档中的信息可能变动，恕不另行通知。

T01设备自身安全性 ····································································································· 2 T02访问控制 ············································································································ 13 T03 NAT功能 ············································································································ 25 T04日志功能 ············································································································ 32 T05可靠性 ··············································································································· 37 T06虚拟化功能 ········································································································· 49 T07 Flood攻击防御功能 ······························································································ 63 T08特征库升级 ········································································································· 67 T09 IPS攻击防护功能 ································································································· 69 T10攻击防护响应方式 ································································································ 86 T11 IPS自定义攻击 ···································································································· 95 T12带宽管理功能 ······································································································ 97 T13数据过滤功能 ···································································································· 125 T14文件过滤 ·········································································································· 144 T15 URL分类过滤功能 ······························································································ 147 T16病毒防御 ·········································································································· 168 T17链路负载均衡（更详细内容参考链路负载均衡测试手册） ············································ 185 T18服务器负载均衡（更详细内容参考服务器负载均衡测试手册） ······································ 187 T19性能测试 ·········································································································· 187

H3C NGFW测试用例

T01 设备自身安全性

T01-01 设备安全登录

测试分组测试项目设备自身安全性设备安全登录 10.1.1.1/2410.1.1.2/24测试拓扑 PCFW 测试目的支持HTTPS、SSH管理 (1) PC作为SSH Client，FW作为SSH Server；PC作为Web登录的Client,FW作为Web Server； (2) 在设备上使能https服务； (3) 首先在FW上生成本地密钥对；测试步骤 (4) 在FW上配置用户登录验证方式为scheme； (5) 在FW上使能ssh server enable，并配置一个用户名为ssh，登录方式为stelnet； (6) 配置本地用户名ssh，密码123456，服务类型ssh； (7) 在PC上运行支持SSH的客户端软件(如putty)，以用户名ssh，密码123456，登录FW。 FW：放行接口所在域到local和local到接口所在域的域间策略 SSH配置 public-key local create rsa public-key local create dsa line vty 0 63 authentication-mode scheme 参考配置 protocol inbound ssh ssh user ssh service-type stelnet authentication-type password local-user ssh service-type ssh password simple 123456 authorization-attribute user-role network-admin ssh server enable Web配置 2018-01-08

H3C机密，未经许可不得扩散第2页, 共197页

ip http enable ip https enable H3C NGFW测试用例 local-user web class manage password simple 123456 service-type http https authorization-attribute user-role network-admin 预期结果测试准备测试说明用sshv2作为用户名通过SSH密码认证方式登录成功，用web作为用户名进行https登录成功。防火墙，PC domain system下需为默认配置 SSH登录过程： (1) 使用SSH方式登录设备，PC地址为1.1.1.2，FW的gi1/0/0为1.1.1.1，三层可达；测试结果 2018-01-08

H3C机密，未经许可不得扩散第3页, 共197页

搜索更多关于： H3C 防火墙测试模板的文档

H3C 防火墙测试模板.doc 将本文的Word文档下载到电脑，方便复制、编辑、收藏和打印

下载这篇word文档

本文链接：https://www.diyifanwen.net/c5qmq399fb37s7tu43p391qw0b8cv4600t3i_1.html（转载请注明文章来源）