<?xml version="1.0" encoding="UTF-8"?><rss version="2.0"
	xmlns:content="http://purl.org/rss/1.0/modules/content/"
	xmlns:wfw="http://wellformedweb.org/CommentAPI/"
	xmlns:dc="http://purl.org/dc/elements/1.1/"
	xmlns:atom="http://www.w3.org/2005/Atom"
	xmlns:sy="http://purl.org/rss/1.0/modules/syndication/"
	xmlns:slash="http://purl.org/rss/1.0/modules/slash/"
	>

<channel>
	<title>Group &#8211; 21點情報網</title>
	<atom:link href="https://ailog.tw/lifelog/tag/group/feed/" rel="self" type="application/rss+xml" />
	<link>https://ailog.tw/lifelog</link>
	<description></description>
	<lastBuildDate>Sun, 24 Jan 2021 07:28:32 +0000</lastBuildDate>
	<language>zh-TW</language>
	<sy:updatePeriod>
	hourly	</sy:updatePeriod>
	<sy:updateFrequency>
	1	</sy:updateFrequency>
	<generator>https://wordpress.org/?v=6.8.3</generator>
	<item>
		<title>跟小編一起學-FortiGate防火牆-設定「網路服務」物件(Console設定方式)</title>
		<link>https://ailog.tw/lifelog/2021/01/24/fgt-service-cmd/</link>
		
		<dc:creator><![CDATA[blackjack]]></dc:creator>
		<pubDate>Sun, 24 Jan 2021 07:28:32 +0000</pubDate>
				<category><![CDATA[3C資訊]]></category>
		<category><![CDATA[Firewall]]></category>
		<category><![CDATA[40F]]></category>
		<category><![CDATA[60B]]></category>
		<category><![CDATA[60D]]></category>
		<category><![CDATA[60E]]></category>
		<category><![CDATA[80C]]></category>
		<category><![CDATA[fortigate]]></category>
		<category><![CDATA[Group]]></category>
		<category><![CDATA[Service]]></category>
		<category><![CDATA[物件]]></category>
		<category><![CDATA[網路服務]]></category>
		<category><![CDATA[網路服務群組]]></category>
		<category><![CDATA[跟小編一起學-FortiGate防火牆-設定「網路服務」物件(Console設定方式)]]></category>
		<guid isPermaLink="false">https://ailog.tw/lifelog/?p=6497</guid>

					<description><![CDATA[今天小編要介紹的單元是透過Console方式，設定FortiGate防火牆「網路服務」及「網路服務群組」物件， &#8230; <p class="link-more"><a href="https://ailog.tw/lifelog/2021/01/24/fgt-service-cmd/" class="more-link">閱讀全文<span class="screen-reader-text">〈跟小編一起學-FortiGate防火牆-設定「網路服務」物件(Console設定方式)〉</span></a></p>]]></description>
										<content:encoded><![CDATA[<p>今天小編要介紹的單元是透過Console方式，設定FortiGate防火牆「網路服務」及「網路服務群組」物件，該物件常使用在防火牆規則的設定過程，趕快跟著小編一起來了解吧。<span id="more-6497"></span><br />
介紹的內容為<br />
透過Console管理畫面：<br />
(1)、建立服務類別<br />
(2)、建立網路服務物件(一)、(二)<br />
(3)、建立網路服務群組物件</p>
<p><span style="font-size: 14pt;"><strong>[建立服務類別]</strong></span><br />
(1)、登入系統<br />
<img decoding="async" class="alignnone wp-image-6501 size-full" src="https://ailog.tw/lifelog/wp-content/uploads/2021/01/FGT-Service-cmd-01.jpg" alt="" width="223" height="123" /><br />
注解說明：輸入帳號及密碼登入防火牆</p>
<p>(2)、切換至「網路服務類別」物件設定模式<br />
指令如下：<br />
config firewall service category<br />
<img decoding="async" class="alignnone wp-image-6500 size-full" src="https://ailog.tw/lifelog/wp-content/uploads/2021/01/FGT-Service-cmd-02.jpg" alt="" width="377" height="82" srcset="https://ailog.tw/lifelog/wp-content/uploads/2021/01/FGT-Service-cmd-02.jpg 377w, https://ailog.tw/lifelog/wp-content/uploads/2021/01/FGT-Service-cmd-02-300x65.jpg 300w" sizes="(max-width: 377px) 100vw, 377px" /><br />
注解說明：開始網路服務類別設定</p>
<p>(3)、新增「網路服務類別」<br />
指令如下：<br />
edit &#8220;ailog.tw&#8221;<br />
<img decoding="async" class="alignnone wp-image-6502 size-full" src="https://ailog.tw/lifelog/wp-content/uploads/2021/01/FGT-Service-cmd-03.jpg" alt="" width="334" height="95" srcset="https://ailog.tw/lifelog/wp-content/uploads/2021/01/FGT-Service-cmd-03.jpg 334w, https://ailog.tw/lifelog/wp-content/uploads/2021/01/FGT-Service-cmd-03-300x85.jpg 300w" sizes="(max-width: 334px) 100vw, 334px" /><br />
注解說明：本範例新增了一個名稱為「ailog.tw」的類別</p>
<p>(4)、查看設定<br />
指令如下：<br />
show<br />
<img loading="lazy" decoding="async" class="alignnone wp-image-6504 size-full" src="https://ailog.tw/lifelog/wp-content/uploads/2021/01/FGT-Service-cmd-04.jpg" alt="" width="338" height="167" srcset="https://ailog.tw/lifelog/wp-content/uploads/2021/01/FGT-Service-cmd-04.jpg 338w, https://ailog.tw/lifelog/wp-content/uploads/2021/01/FGT-Service-cmd-04-300x148.jpg 300w" sizes="auto, (max-width: 338px) 100vw, 338px" /><br />
注解說明：查看設定是否正確，有無遺漏項目</p>
<p>(5)、離開「網路服務類別」物件設定模式<br />
指令如下：<br />
end<br />
<img loading="lazy" decoding="async" class="alignnone size-full wp-image-6505" src="https://ailog.tw/lifelog/wp-content/uploads/2021/01/FGT-Service-cmd-05.jpg" alt="" width="221" height="83" /><br />
注解說明：如果要繼續新增其他的類別物件則輸入「next」，要結束類別設定則輸入「end」。</p>
<p><span style="font-size: 14pt;"><strong>[建立網路服務物件](一)<br />
</strong></span>(1)、切換至「網路服務」物件設定模式<br />
指令如下：<br />
config firewall service custom<br />
<img loading="lazy" decoding="async" class="alignnone wp-image-6507 size-full" src="https://ailog.tw/lifelog/wp-content/uploads/2021/01/FGT-Service-cmd-06.jpg" alt="" width="356" height="88" srcset="https://ailog.tw/lifelog/wp-content/uploads/2021/01/FGT-Service-cmd-06.jpg 356w, https://ailog.tw/lifelog/wp-content/uploads/2021/01/FGT-Service-cmd-06-300x74.jpg 300w" sizes="auto, (max-width: 356px) 100vw, 356px" /><br />
注解說明：開始網路服務物件設定</p>
<p>(2)、新增「網路服務」物件<br />
指令如下：<br />
edit &#8220;Synology-Drive&#8221;<br />
set category &#8220;ailog.tw&#8221;<br />
set tcp-portrange 5000-5001<br />
<img loading="lazy" decoding="async" class="alignnone wp-image-6508 size-full" src="https://ailog.tw/lifelog/wp-content/uploads/2021/01/FGT-Service-cmd-07.jpg" alt="" width="510" height="195" srcset="https://ailog.tw/lifelog/wp-content/uploads/2021/01/FGT-Service-cmd-07.jpg 510w, https://ailog.tw/lifelog/wp-content/uploads/2021/01/FGT-Service-cmd-07-300x115.jpg 300w" sizes="auto, (max-width: 510px) 100vw, 510px" /><br />
注解說明：本範例新增了一個名稱為「Synology-Drive」的網路服務，並將類別設定為「ailog.tw」，並定義採用「TCP」協定，服務埠(Port)則為5000與5001兩個。</p>
<p>(3)、查看設定<br />
指令如下：<br />
show<br />
<img loading="lazy" decoding="async" class="alignnone wp-image-6509 size-full" src="https://ailog.tw/lifelog/wp-content/uploads/2021/01/FGT-Service-cmd-08.jpg" alt="" width="373" height="204" srcset="https://ailog.tw/lifelog/wp-content/uploads/2021/01/FGT-Service-cmd-08.jpg 373w, https://ailog.tw/lifelog/wp-content/uploads/2021/01/FGT-Service-cmd-08-300x164.jpg 300w" sizes="auto, (max-width: 373px) 100vw, 373px" /><br />
注解說明：查看設定是否正確，有無遺漏項目</p>
<p>(4)、離開「網路服務」物件設定模式<br />
指令如下：<br />
end<br />
<img loading="lazy" decoding="async" class="alignnone wp-image-6510 size-full" src="https://ailog.tw/lifelog/wp-content/uploads/2021/01/FGT-Service-cmd-09.jpg" alt="" width="277" height="76" /><br />
注解說明：如果要繼續新增其他的網路服務物件則輸入「next」，要結束類別設定則輸入「end」。</p>
<p><span style="font-size: 14pt;"><strong>[建立網路服務物件](二)</strong></span><br />
(1)、切換至「網路服務」物件設定模式<br />
指令如下：<br />
config firewall service custom<br />
<img loading="lazy" decoding="async" class="alignnone wp-image-6507 size-full" src="https://ailog.tw/lifelog/wp-content/uploads/2021/01/FGT-Service-cmd-06.jpg" alt="" width="356" height="88" srcset="https://ailog.tw/lifelog/wp-content/uploads/2021/01/FGT-Service-cmd-06.jpg 356w, https://ailog.tw/lifelog/wp-content/uploads/2021/01/FGT-Service-cmd-06-300x74.jpg 300w" sizes="auto, (max-width: 356px) 100vw, 356px" /><br />
注解說明：開始網路服務物件設定</p>
<p>(2)、新增「網路服務」物件<br />
指令如下：<br />
edit &#8220;tomcat&#8221;<br />
set category &#8220;ailog.tw&#8221;<br />
set tcp-portrange 8080<br />
<img loading="lazy" decoding="async" class="alignnone wp-image-6511 size-full" src="https://ailog.tw/lifelog/wp-content/uploads/2021/01/FGT-Service-cmd-10.jpg" alt="" width="381" height="186" srcset="https://ailog.tw/lifelog/wp-content/uploads/2021/01/FGT-Service-cmd-10.jpg 381w, https://ailog.tw/lifelog/wp-content/uploads/2021/01/FGT-Service-cmd-10-300x146.jpg 300w" sizes="auto, (max-width: 381px) 100vw, 381px" /><br />
注解說明：本範例新增了一個名稱為「tomcat」的網路服務，並將類別設定為「ailog.tw」，並定義採用「TCP」協定，服務埠(Port)則為8080。</p>
<p>(3)、查看設定<br />
指令如下：<br />
show<br />
<img loading="lazy" decoding="async" class="alignnone wp-image-6513 size-full" src="https://ailog.tw/lifelog/wp-content/uploads/2021/01/FGT-Service-cmd-10-1.jpg" alt="" width="318" height="162" srcset="https://ailog.tw/lifelog/wp-content/uploads/2021/01/FGT-Service-cmd-10-1.jpg 318w, https://ailog.tw/lifelog/wp-content/uploads/2021/01/FGT-Service-cmd-10-1-300x153.jpg 300w" sizes="auto, (max-width: 318px) 100vw, 318px" /><br />
注解說明：查看設定是否正確，有無遺漏項目</p>
<p>(4)、離開「網路服務」物件設定模式<br />
指令如下：<br />
end<br />
<img loading="lazy" decoding="async" class="alignnone size-full wp-image-6512" src="https://ailog.tw/lifelog/wp-content/uploads/2021/01/FGT-Service-cmd-11.jpg" alt="" width="212" height="79" /><br />
注解說明：如果要繼續新增其他的網路服務物件則輸入「next」，要結束類別設定則輸入「end」。</p>
<p>&nbsp;</p>
<p><span style="font-size: 14pt;"><strong>[建立網路服務群組物件]<br />
</strong></span>(1)、切換至「網路服務群組」物件設定模式<br />
指令如下：<br />
config firewall service group<br />
<img loading="lazy" decoding="async" class="alignnone wp-image-6514 size-full" src="https://ailog.tw/lifelog/wp-content/uploads/2021/01/FGT-Service-cmd-12.jpg" alt="" width="372" height="78" srcset="https://ailog.tw/lifelog/wp-content/uploads/2021/01/FGT-Service-cmd-12.jpg 372w, https://ailog.tw/lifelog/wp-content/uploads/2021/01/FGT-Service-cmd-12-300x63.jpg 300w" sizes="auto, (max-width: 372px) 100vw, 372px" /><br />
注解說明：開始網路服務群組物件設定</p>
<p>(2)、設定「網路服務群組」物件<br />
指令如下：<br />
edit &#8220;Ailog.tw-Service&#8221;<br />
set member &#8220;Synology-Drive&#8221; &#8220;tomcat&#8221;<br />
<img loading="lazy" decoding="async" class="alignnone wp-image-6515 size-full" src="https://ailog.tw/lifelog/wp-content/uploads/2021/01/FGT-Service-cmd-13.jpg" alt="" width="609" height="152" srcset="https://ailog.tw/lifelog/wp-content/uploads/2021/01/FGT-Service-cmd-13.jpg 609w, https://ailog.tw/lifelog/wp-content/uploads/2021/01/FGT-Service-cmd-13-300x75.jpg 300w" sizes="auto, (max-width: 609px) 100vw, 609px" /><br />
注解說明：本範例新增了一個名稱為「Ailog.tw-Service」的網路服務群組，並定義群組內包含了「Synology-Drive」、「tomcat」這兩個服務。</p>
<p>(3)、查看設定<br />
指令如下：<br />
show<br />
<img loading="lazy" decoding="async" class="alignnone wp-image-6517 size-full" src="https://ailog.tw/lifelog/wp-content/uploads/2021/01/FGT-Service-cmd-15.jpg" alt="" width="456" height="180" srcset="https://ailog.tw/lifelog/wp-content/uploads/2021/01/FGT-Service-cmd-15.jpg 456w, https://ailog.tw/lifelog/wp-content/uploads/2021/01/FGT-Service-cmd-15-300x118.jpg 300w" sizes="auto, (max-width: 456px) 100vw, 456px" /><br />
注解說明：查看設定是否正確，有無遺漏項目</p>
<p>(4)、離開「網路服務群組」物件設定模式<br />
指令如下：<br />
end<br />
<img loading="lazy" decoding="async" class="alignnone wp-image-6516 size-full" src="https://ailog.tw/lifelog/wp-content/uploads/2021/01/FGT-Service-cmd-14.jpg" alt="" width="315" height="81" srcset="https://ailog.tw/lifelog/wp-content/uploads/2021/01/FGT-Service-cmd-14.jpg 315w, https://ailog.tw/lifelog/wp-content/uploads/2021/01/FGT-Service-cmd-14-300x77.jpg 300w" sizes="auto, (max-width: 315px) 100vw, 315px" /><br />
注解說明：如果要繼續新增其他的網路服務群組物件則輸入「next」，要結束類別設定則輸入「end」。</p>
]]></content:encoded>
					
		
		
			</item>
	</channel>
</rss>
