【正文】 CISCO ASA5520BUNK9參數(shù)規(guī)格主要參數(shù)設(shè)備類型VPN防火墻并發(fā)連接數(shù)280000網(wǎng)絡(luò)吞吐量450Mbps安全過(guò)濾帶寬225Mbps用戶數(shù)限制無(wú)用戶數(shù)限制網(wǎng)絡(luò)端口千兆以太網(wǎng)端口快速以太網(wǎng)端口SSM 擴(kuò)展插槽1控制端口consoleVPN支持支持入侵檢測(cè)DoS管理思科安全管理器 (CSManager) ,Web安全標(biāo)準(zhǔn)UL 1950,CSA No. 950,EN 60950 IEC 60950,AS/NZS3260,TS001防火墻參數(shù) 表134校園網(wǎng)項(xiàng)目部署與實(shí)現(xiàn)配置交換機(jī)特權(quán)模式密碼和遠(yuǎn)程登錄密碼enable password gdcpline vty 0 4password gdcploginconf thostname HX_SW1in ran f0/2 9no shuswitchport trunk encapsulation dot1qsw mo trin ran f0/2 3no shuchannelgroup 1 mode onexinterface portchannel 1switchport mode trunkendvlan databasevlan 10 name ShiXunvlan 20 name Jiaoxuevlan 30 name CaiWuvlan 40 name JiaoDaovlan 50 name TuShuvlan 60 name ShiTangvlan 70 name TiYuvlan 80 name SuSheBVlan 90 name SuSheAvlan 100 name Serverapplyvtp domain gdcpvtp servervtp password gdcpvtp pruning vtp domain gdcpvtp servervtp password gdcpvtp pruning exconf tspanningtree vlan 10 root primaryspanningtree vlan 20 root primaryspanningtree vlan 30 root primaryspanningtree vlan 40 root primaryspanningtree vlan 50 root primaryspanningtree vlan 60 root primaryspanningtree vlan 70 root primaryspanningtree vlan 80 root primaryspanningtree vlan 90 root primaryspanningtree vlan 100 root primaryin vlan 10no shuip add ip helperaddress standby 10 ip standby 10 priority 150standby 10 preemptin vlan 20no shuip add ip helperaddress standby 20 ip standby 20 priority 150standby 20 preemptin vlan 30no shuip add ip helperaddress standby 30 ip standby 30 priority 150standby 30 preemptin vlan 40no shuip add ip helperaddress standby 40 ip standby 40 priority 150standby 40 preemptin vlan 50no shuip add ip helperaddress standby 50 ip standby 50 priority 150standby 50 preemptin vlan 60no shuip add ip helperaddress standby 60 ip standby 60 priority 150standby 60 preemptin vlan 70no shuip add ip helperaddress standby 70 ip standby 70 priority 150standby 70 preemptin vlan 80no shuip add ip helperaddress standby 80 ip standby 80 priority 150standby 80 preemptin vlan 90no shuip add ip helperaddress standby 90 ip standby 90 priority 150standby 90 preemptin vlan 100no shuip add ip helperaddress standby 100 ip standby 100 priority 150standby 100 preemptinterface FastEthernet0/1no switchportip address exrouter ospf 10network area 0network area 0network area 0network area 0network area 0network area 0network area 0network area 0network area 0network area 0network area 0exip route 實(shí)訓(xùn)樓accesslist 100 deny ip accesslist 100 deny ip accesslist 100 deny ip accesslist 100 deny ip accesslist 100 deny ip accesslist 100 deny ip accesslist 100 permit ip any anyin vlan 10ip accessgroup 100 in教學(xué)樓accesslist 101 deny ip accesslist 101 deny ip accesslist 101 deny ip accesslist 101 deny ip accesslist 101 deny ip accesslist 101 deny ip accesslist 101 permit ip any anyin vlan 20ip accessgroup 101 in財(cái)務(wù)處accesslist 102 deny ip accesslist 102 deny ip accesslist 102 deny ip accesslist 102 permit ip any anyin vlan 30ip accessgroup 102 in教導(dǎo)處accesslist 103 deny ip accesslist 103 deny ip accesslist 103 deny ip accesslist 103 permit ip any anyin vlan 40ip accessgroup 103 in圖書(shū)館accesslist 104 deny ip accesslist 104 deny ip accesslist 104 deny ip accesslist 104 deny ip accesslist 104 deny ip accesslist 104 deny ip accesslist 104 permit ip any anyin vlan 50ip accessgroup 104 in食堂accesslist 105 deny ip accesslist 105 deny ip accesslist 105 deny ip accesslist 105 deny ip accesslist 105 deny ip accesslist 105 permit ip any anyin vlan 60ip accessgroup 105 in體育館accesslist 106 deny ip accesslist 106 deny ip accesslist 106 deny ip accesslist 106 deny ip accesslist 106 deny ip accesslist 106 permit ip any anyin vlan 70ip accessgroup 106 in宿舍Aaccesslist 107 deny ip accesslist 107 deny ip accesslist 107 deny ip accesslist 107 deny ip accesslist 107 deny ip accesslist 107 deny ip accesslist 107 permit ip any anyin vlan 80ip accessgroup 107 in宿舍Baccesslist 108 deny ip accesslist 108 deny ip accesslist 108 deny ip accesslist 108 deny ip accesslist 108 deny ip accesslist 108 deny ip accesslist 108 permit ip any anyin vlan 90ip accessgroup 108 in服務(wù)器accesslist 109 permit tcp any host eq accesslist 109 permit tcp host eq ftpaccesslist 109 permit tcp host eq ftpaccesslist 109 permit tcp host eq ftpaccesslist 109 permit tcp host eq ftpaccesslist 109 permit udp any host eq 53accesslist 109 deny ip any anyin vlan 100ip accessgroup 109 inshow run的配置截圖核心層配置截圖（1）31核心層配置截圖（2）核心層配置截圖（3）核心層配置截圖（4）配置交換機(jī)特權(quán)模式密碼和遠(yuǎn)程登錄密碼enable password gdcpline vty 0 4password gdcploginconf thostname HX_SW2in ran f0/2 9no shuswitchport trunk encapsulation dot1qsw mo trin ran f0/2 3no shuchannelgroup 1 mode onexinterface portchannel 1switchport mode trunkendvlan databasevlan 10 name ShiXunvlan 20 name Jiaoxuevlan 30 name CaiWuvlan 40 name JiaoDaovlan 50 name TuShuvlan 60 name ShiTang33vlan 70 name TiYuvlan 80 name SuSheBvlan 90 name SuSheAvlan 100 name Serverapplyvtp domain gdcpvtp servervtp password gdcpvtp pruning exconf tspanningtree vlan 10 root secondaryspanningtree vlan 20 root secondaryspanningtree vlan 30 root secondaryspanningtree vla