V100R005C00SPC700版本以後配置DPI
dpi
whole-packet-search enable applica€✔£<tion gnutella
whole-packet-search $✔₽enable application msn_audiππ↔o
whole-packet-search ena♦÷♦¶ble application msn_im
whole-packet-search enable applica₽←> tion http
whole-packet-search enable ap&©₩plication https
whole-packet-search enable↕< application mms_stream_signal
whole-packet-search Ω♣₩enable application rtsp
whole-packet-search enable application ♠£pop3_ssl
whole-packet-search enaΩ•ble application wap_co​™±nnless
whole-packet-search en♣&able application wap_conn
whole-packet-search enable applica≤♦¶tion ssl
whole-packet-search enable application ♠ε☆quicktime_streaming
whole-packet-search enable ↑&  application cotp_data
whole-packet-search enab  >αle application stun
whole-packet-search enable appl₹★™ication icy
whole-packet-search enable applicationδ∑≤♣ tcp_other
relation-detection enable
auto save configuration☆₩ 
update rule-base server domain sec.h¶π×✔uawei.com
update rule-base remote period 1φ≠•≠5
remission-ip 192.168.104.0 m£ >ask 24 /免監控IP
remission-ip address∑ '≈-set vip /免監控I×<P
identification-range 192.1Ω✔✔₩68.0.0 mask 16 /監控IP
#
template 1 /配置模版
rule 0 if-match categ¶♥ory Attack apply deny
rule 1 if-match category Bo↕πtNet apply deny
rule 2 if-match category P2P apply d✘γ¶eny
rule 3 if-match category Pγ♠←♦eerCasting apply qos-caγ•¥→r 100
rule 4 if-match category Worm ∑$apply deny
#
policy 1 /應用(yòng)模塊
policy template 1
#
早期版本：
#
dpi
whole-packet-search enable appl  ication gnutella
whole-packet-search enable aαΩpplication msn_audio
whole-packet-search enable a♦±pplication msn_im
whole-packet-search en ©>able application http
whole-packet-search enabl♦ e application https
whole-packet-search enable applicatio₩€n mms_stream_signal
whole-packet-search enable application ÷♦rtsp
whole-packet-search enable application &δ​pop3_ssl
whole-packet-search enable appπ≤lication wap_connless
whole-packet-search enable appl↑​£ication wap_conn
whole-packet-search enable appli$♥cation ssl
whole-packet-search enable application ∞★$cotp_data
whole-packet-search enable applicati&≥±on stun
whole-packet-search ena €ε≈ble application icy
relation-detection enableγδ
update rule-base server doε'£™main sec.huawei.com
update rule-base remote periλδ←¥od 15
rule 1 if-match category p< £2p packet-filter acl-number 2™™÷₹000 直接配置Rule應用(yòng)✔∑∏ACL。
#
return