思科5505配置詳解(編輯修改稿)
2025-07-25 15:04 本頁面
【文章內(nèi)容簡介】 ssgroup 101 in interface outside 。 將ACL應(yīng)用在outside端口當(dāng)內(nèi)部主機(jī)訪問外部主機(jī)時(shí)，通過nat轉(zhuǎn)換成公網(wǎng)IP，訪問internet。當(dāng)內(nèi)部主機(jī)訪問中間區(qū)域dmz時(shí)，將自己映射成自己訪問服務(wù)器，否則內(nèi)部主機(jī)將會映射成地址池的IP，到外部去找。當(dāng)外部主機(jī)訪問中間區(qū)域dmz時(shí)， ，static是雙向的。PIX的所有端口默認(rèn)是關(guān)閉的，進(jìn)入PIX要經(jīng)過acl入口過濾。靜態(tài)路由指示內(nèi)部的主機(jī)和dmz的數(shù)據(jù)包從outside口出去。例子:sh run: Saved:ASA Version (2)!hostname ciscoasaenable password encryptednames!interface Vlan1nameif insidesecuritylevel 100ip address !interface Vlan2nameif outsidesecuritylevel 0ip address !interface Ethernet0/0switchport access vlan 2!interface Ethernet0/1!interface Ethernet0/2!interface Ethernet0/3!interface Ethernet0/4!interface Ethernet0/5!interface Ethernet0/6!interface Ethernet0/7!passwd encryptedftp mode passivedns domainlookup insidedns domainlookup outsideaccesslist 100 extended permit icmp any anyaccesslist 100 extended permit tcp any host eq accesslist 100 extended permit tcp any host eq smtpaccesslist 100 extended permit tcp any host eq pop3accesslist 100 extended permit tcp any host eq ftpaccesslist 100 extended permit tcp any host eq sshaccesslist 100 extended permit tcp any host eq pcanywheredataaccesslist 100 extended permit udp any host eq pcanywherestatusaccesslist 100 extended permit tcp any host eq 8086accesslist 100 extended permit tcp any host eq 3389accesslist 100 extended permit tcp any host eq 2401accesslist 100 extended permit ip any anyaccesslist 100 extended permit ip any host pager lines 24mtu inside 1500mtu outside 1500icmp unreachable ratelimit 1 burstsize 1no asdm history enablearp timeout 14400global (outside) 1 interfacenat (inside) 1 static (inside,outside) tcp netmask static (inside,outside) tcp ftp ftp netmask static (inside,outside) tcp smtp smtp netmask static (inside,outside) tcp pop3 pop3 netmask static (inside,outside) tcp 3389 3389 netmask static (inside,outside) tcp 8086 8086 netmask static (inside,outside) netmask accessgroup 100 in interface outsideroute outside 1timeout xlate 3:00:00timeout conn 1:00:00 halfclosed 0:10:00 udp 0:02:00 icmp 0:00:02timeout sunrpc 0:10:00 h323 0:05:00 h225 1:00:00 mgcp 0:05:00 mgcppat 0:05:00timeo
環(huán)評公示相關(guān)推薦
鄂ICP備17016276號-1