目录
前言
一、Zabbix搭建
二、FW1
三、python脚本
四、core-sw1
五、core-sw2
六、DMZ-sw1
前言
详细配置视频解析访问：白帽小丑的个人空间-白帽小丑个人主页-哔哩哔哩视频
一、Zabbix搭建
sed -i 's/SELINUX=enforcing/SELINUX=disable/' /etc/selinux/config
systemctl disable --now firewalld
timedatectl
timedatectl set-timezone Asia/Shanghai
rpm -Uvh https://repo.zabbix.com/zabbix/5.0/rhel/7/x86_64/zabbix-release-5.0-1.el7.noarch.rpm
ls /etc/yum.repos.d/
cat /etc/yum.repos.d/zabbix.repo
yum clean all
yum makecache
yum install zabbix-server-mysql zabbix-agent -y
yum install centos-release-scl
yum list rh-php7\*
vim /etc/yum.repos.d/zabbix.repo //进入配置文件
#使用键盘将光标定位到 [zabbix-frontend] 下 enable=_?_ 位置。
#点击键盘 i 进行编辑，将数值改为 enable=1 。
#按键盘 esc 退出编辑。
#输入 :wq 保存并退出配置文件。
yum install zabbix-web-mysql-scl zabbix-apache-conf-scl -y
ls /opt/rh/
yum install mariadb-server -y
systemctl status mariadb
systemctl enable --now mariadb
mysql_secure_installation
mysql -uroot -p
create database zabbix character set utf8 collate utf8_bin;
create user zabbix@localhost identified by 'zabbix@123';
grant all privileges on zabbix.* to zabbix@localhost;
flush privileges ;
zcat /usr/share/doc/zabbix-server-mysql*/create.sql.gz | mysql -uzabbix -p zabbix
vi /etc/zabbix/zabbix_server.conf //进入zabbix-server配置文件
#输入 /DBPa 定位到 DBPpassword= 的位置。
#按 i 进行编辑，修改数据库的密码，并将行前的#符号删除。
# esc 然后 :wq 保存并退出。
vim /etc/opt/rh/rh-php72/php-fpm.d/zabbix.conf
#找到时区，将其修改为 Asia/Shanghai
systemctl restart zabbix-server zabbix-agent httpd rh-php72-php-fpm
systemctl enable zabbix-server zabbix-agent httpd rh-php72-php-fpm
yum install wqy-microhei-fonts -y
\cp /usr/share/fonts/wqy-microhei/wqy-microhei.ttc /usr/share/fonts/dejavu/DejaVuSans.ttf
yum install zabbix-get -y
yum install net-tools -y
二、FW1
#注意不要使用本地登录的用户
aaa
manager-user user1
password cipher Huawei@123
level 15
service-type ssh
quit
quit
user-interface vty 0 4
authentication-mode aaa
protocol inbound all
quit
stelnet server enable
ssh user user1
ssh user user1 authentication-type password
ssh user user1 service-type stelnet
#注意长度为2048
rsa local-key-pair create
Y
2048
inter gi1/0/3
service-manage ssh permit
security-policy
rule name Trust-to-Dmz
source-zone trust
destination-zone dmz
source-address 10.1.0.0 mask 255.255.255.0
destination-address 4.4.4.4 mask 255.255.255.255
action permit
security-policy
rule name Dmz-to-Trust
source-zone dmz
destination-zone trust
source-address 4.4.4.4 mask 255.255.255.255
destination-address 10.1.0.0 mask 255.255.255.0
action permit
system-view
snmp-agent
snmp-agent sys-info version v2c
snmp-agent community read huawei@123
snmp-agent community write huawei@123
snmp-agent target-host trap address udp-domain 10.1.0.100 params securityname huawei@123 v2c
snmp-agent trap enable
Y
三、python脚本
python自动化管理和zabbix监控网络设备（防火墙和python自动化配置部分）-CSDN博客
四、core-sw1
#ssh配置
aaa
local-user huawei password cipher huawei
local-user huawei service-type ssh telnet
local-user huawei privilege level 15
quit
stelnet server enable
user-interface vty 0 4
authentication-mode aaa
protocol inbound all
quit
rsa local-key-pair create
Y
2048
ssh user huawei authentication-type password
ssh user huawei service-type stelnet
quit
#snmp配置
system-view
snmp-agent
snmp-agent sys-info version v2c
snmp-agent community read huawei@123
snmp-agent community write huawei@123
snmp-agent target-host trap address udp-domain 10.1.0.100 params securityname huawei@123 v2c
snmp-agent trap enable
Y五、core-sw2
#ssh配置
aaa
local-user huawei password cipher huawei
local-user huawei service-type ssh telnet
local-user huawei privilege level 15
quit
stelnet server enable
user-interface vty 0 4
authentication-mode aaa
protocol inbound all
quit
rsa local-key-pair create
Y
2048
ssh user huawei authentication-type password
ssh user huawei service-type stelnet
quit
#snmp配置
system-view
snmp-agent
snmp-agent sys-info version v2c
snmp-agent community read huawei@123
snmp-agent community write huawei@123
snmp-agent target-host trap address udp-domain 10.1.0.100 params securityname huawei@123 v2c
snmp-agent trap enable
Y六、DMZ-sw1
#ssh配置
aaa
local-user huawei password cipher huawei
local-user huawei service-type ssh telnet
local-user huawei privilege level 15
quit
stelnet server enable
user-interface vty 0 4
authentication-mode aaa
protocol inbound all
quit
rsa local-key-pair create
Y
2048
ssh user huawei authentication-type password
ssh user huawei service-type stelnet
quit
#snmp配置
system-view
snmp-agent
snmp-agent sys-info version v2c
snmp-agent community read huawei@123
snmp-agent community write huawei@123
snmp-agent target-host trap address udp-domain 10.1.0.100 params securityname huawei@123 v2c
snmp-agent trap enable
Y
