cisco5520防火墙求助 配置实例.doc

《cisco5520防火墙求助 配置实例.doc》由会员分享，可在线阅读，更多相关《cisco5520防火墙求助 配置实例.doc（13页珍藏版）》请在淘文阁 - 分享文档赚钱的网站上搜索。

1、如有侵权，请联系网站删除，仅供学习与交流cisco5520防火墙求助 配置实例【精品文档】第 13 页cisco5520防火墙求助 配置实例2007年12月17日 星期一 14:02开通远程登入的命令是什么？10.0.0.1 内网可以telnet我想通过外网 61.175.201.80 telnet防火墙希望各位大大帮帮忙。具体配置如下：ciscoasa# show ipSystem IP Addresses:Interface Name IP address Subnet mask Method GigabitEthernet0/0 outside1 61.175.201.80 255.25

2、5.255.248 CONFIGGigabitEthernet0/1 outside2 221.12.102.112 255.255.255.248 CONFIGGigabitEthernet0/2 inside 10.0.0.1 255.255.240.0 CONFIGManagement0/0 management 192.168.1.1 255.255.255.0 CONFIGCurrent IP Addresses:Interface Name IP address Subnet mask Method GigabitEthernet0/0 outside1 61.175.201.80

3、 255.255.255.248 CONFIGGigabitEthernet0/1 outside2 221.12.102.112 255.255.255.248 CONFIGGigabitEthernet0/2 inside 10.0.0.1 255.255.240.0 CONFIGManagement0/0 management 192.168.1.1 255.255.255.0 CONFIGciscoasa# show run: Saved:ASA Version 7.2(2) !hostname ciscoasaenable password 2KFQnbNIdI.2KYOU encr

4、yptednames!interface GigabitEthernet0/0nameif outside1security-level 0ip address 61.175.201.80 255.255.255.248 !interface GigabitEthernet0/1nameif outside2security-level 0ip address 221.12.102.112 255.255.255.248 !interface GigabitEthernet0/2nameif insidesecurity-level 100ip address 10.0.0.1 255.255

5、.240.0 !interface GigabitEthernet0/3shutdownno nameif no security-levelno ip address!interface Management0/0nameif managementsecurity-level 100ip address 192.168.1.1 255.255.255.0 management-only!passwd 2KFQnbNIdI.2KYOU encryptedftp mode passiveaccess-list outside_access_in extended permit icmp any

6、any access-list mail extended permit 110 any any access-list mail extended permit 25 any any access-list mail extended permit icmp any any access-list mail extended permit tcp any any eq 81 access-list dianxin extended permit ip 10.0.0.0 255.255.240.0 any access-list test extended permit tcp any any

7、 eq smtp access-list test extended permit icmp any any access-list test extended permit tcp any any eq pop3 access-list test extended permit tcp any any eq 1970 access-list test extended permit tcp any any eq 1971 access-list test extended permit tcp any any eq www access-list test extended permit t

8、cp any any eq 5001 access-list test extended permit tcp any any eq pcanywhere-data access-list test extended permit tcp any any eq 3389 access-list test extended permit tcp any any eq 5632 access-list test extended permit tcp any any access-list test extended permit udp any any access-list extended

9、extended permit tcp any any pager lines 24logging asdm informationalmtu outside1 1500mtu outside2 1500mtu inside 1500mtu management 1500no failovericmp unreachable rate-limit 1 burst-size 1no asdm history enablearp timeout 14400global (outside1) 1 interfaceglobal (outside2) 2 interfacenat (inside) 2

10、 access-list wangtongnat (inside) 1 access-list dianxinstatic (inside,outside1) tcp interface 81 10.0.0.101 81 netmask 255.255.255.255 static (inside,outside1) tcp interface pop3 10.0.0.101 pop3 netmask 255.255.255.255 static (inside,outside1) tcp interface smtp 10.0.0.101 smtp netmask 255.255.255.2

11、55 static (inside,outside2) tcp interface www 10.0.0.99 www netmask 255.255.255.255 static (inside,outside1) tcp interface www 10.0.0.99 www netmask 255.255.255.255 static (inside,outside1) tcp interface 1970 10.0.0.2 1970 netmask 255.255.255.255 static (inside,outside2) tcp interface 1971 10.0.0.2

12、1971 netmask 255.255.255.255 static (inside,outside1) tcp interface 5001 10.0.0.101 5001 netmask 255.255.255.255 static (inside,outside2) tcp interface pcanywhere-data 10.0.0.108 pcanywhere-data netmask 255.255.255.255 static (inside,outside2) tcp interface 5632 10.0.0.108 5632 netmask 255.255.255.2

13、55 static (inside,outside1) tcp interface 5632 10.0.0.108 5632 netmask 255.255.255.255 static (inside,outside1) tcp interface pcanywhere-data 10.0.0.108 pcanywhere-data netmask 255.255.255.255 static (inside,outside1) tcp interface 3389 10.0.0.108 3389 netmask 255.255.255.255 static (inside,outside2

14、) tcp interface 1970 10.0.0.2 1970 netmask 255.255.255.255 static (inside,outside1) tcp interface 1971 10.0.0.2 1971 netmask 255.255.255.255 access-group test in interface outside1access-group test in interface outside2route outside1 0.0.0.0 0.0.0.0 61.175.223.89 1route outside2 58.16.0.0 255.255.0.

15、0 221.12.104.113 1route outside2 58.17.0.0 255.255.128.0 221.12.104.113 1route outside2 58.17.128.0 255.255.128.0 221.12.104.113 1route outside2 58.18.0.0 255.255.0.0 221.12.104.113 1route outside2 58.19.0.0 255.255.0.0 221.12.104.113 1route outside2 58.20.0.0 255.255.0.0 221.12.104.113 1route outsi

16、de2 58.21.0.0 255.255.0.0 221.12.104.113 1route outside2 58.22.0.0 255.254.0.0 221.12.104.113 1route outside2 58.240.0.0 255.254.0.0 221.12.104.113 1route outside2 58.242.0.0 255.254.0.0 221.12.104.113 1route outside2 58.244.0.0 255.254.0.0 221.12.104.113 1route outside2 58.246.0.0 255.254.0.0 221.1

17、2.104.113 1route outside2 58.248.0.0 255.248.0.0 221.12.104.113 1route outside2 60.0.0.0 255.248.0.0 221.12.104.113 1route outside2 60.8.0.0 255.254.0.0 221.12.104.113 1route outside2 60.10.0.0 255.255.0.0 221.12.104.113 1route outside2 60.11.0.0 255.255.0.0 221.12.104.113 1route outside2 60.12.0.0

18、255.255.0.0 221.12.104.113 1route outside2 60.13.0.0 255.255.192.0 221.12.104.113 1route outside2 60.13.64.0 255.255.192.0 221.12.104.113 1route outside2 60.13.128.0 255.255.128.0 221.12.104.113 1route outside2 60.14.0.0 255.254.0.0 221.12.104.113 1route outside2 60.16.0.0 255.248.0.0 221.12.104.113

19、 1route outside2 60.24.0.0 255.252.0.0 221.12.104.113 1route outside2 60.28.0.0 255.254.0.0 221.12.104.113 1route outside2 60.30.0.0 255.255.0.0 221.12.104.113 1route outside2 60.31.0.0 255.255.0.0 221.12.104.113 1route outside2 60.208.0.0 255.248.0.0 221.12.104.113 1route outside2 60.216.0.0 255.25

20、4.0.0 221.12.104.113 1route outside2 60.218.0.0 255.254.0.0 221.12.104.113 1route outside2 60.220.0.0 255.252.0.0 221.12.104.113 1route outside2 61.48.0.0 255.252.0.0 221.12.104.113 1route outside2 61.52.0.0 255.254.0.0 221.12.104.113 1route outside2 61.54.0.0 255.255.0.0 221.12.104.113 1route outsi

21、de2 61.55.0.0 255.255.0.0 221.12.104.113 1route outside2 61.133.0.0 255.255.128.0 221.12.104.113 1route outside2 61.134.96.0 255.255.224.0 221.12.104.113 1route outside2 61.134.128.0 255.255.192.0 221.12.104.113 1route outside2 61.134.192.0 255.255.192.0 221.12.104.113 1route outside2 61.135.0.0 255

22、.255.0.0 221.12.104.113 1route outside2 61.136.0.0 255.255.192.0 221.12.104.113 1route outside2 61.136.64.0 255.255.192.0 221.12.104.113 1route outside2 61.137.128.0 255.255.128.0 221.12.104.113 1route outside2 61.138.0.0 255.255.192.0 221.12.104.113 1route outside2 61.138.64.0 255.255.192.0 221.12.

23、104.113 1route outside2 61.138.128.0 255.255.192.0 221.12.104.113 1route outside2 61.139.128.0 255.255.192.0 221.12.104.113 1route outside2 61.148.0.0 255.254.0.0 221.12.104.113 1route outside2 61.156.0.0 255.255.0.0 221.12.104.113 1route outside2 61.158.0.0 255.255.128.0 221.12.104.113 1route outsi

24、de2 61.158.128.0 255.255.128.0 221.12.104.113 1route outside2 61.159.0.0 255.255.192.0 221.12.104.113 1route outside2 61.161.0.0 255.255.192.0 221.12.104.113 1route outside2 61.161.128.0 255.255.128.0 221.12.104.113 1route outside2 61.162.0.0 255.255.0.0 221.12.104.113 1route outside2 61.163.0.0 255

25、.255.0.0 221.12.104.113 1route outside2 61.167.0.0 255.255.0.0 221.12.104.113 1route outside2 61.168.0.0 255.255.0.0 221.12.104.113 1route outside2 61.176.0.0 255.255.0.0 221.12.104.113 1route outside2 61.179.0.0 255.255.0.0 221.12.104.113 1route outside2 61.180.128.0 255.255.128.0 221.12.104.113 1r

26、oute outside2 61.181.0.0 255.255.0.0 221.12.104.113 1route outside2 61.182.0.0 255.255.0.0 221.12.104.113 1route outside2 61.189.0.0 255.255.128.0 221.12.104.113 1route outside2 116.2.0.0 255.254.0.0 221.12.104.113 1route outside2 121.16.0.0 255.248.0.0 221.12.104.113 1route outside2 121.24.0.0 255.

27、252.0.0 221.12.104.113 1route outside2 121.30.0.0 255.255.0.0 221.12.104.113 1route outside2 121.31.0.0 255.255.0.0 221.12.104.113 1route outside2 122.136.0.0 255.248.0.0 221.12.104.113 1route outside2 122.156.0.0 255.252.0.0 221.12.104.113 1route outside2 122.192.0.0 255.252.0.0 221.12.104.113 1rou

28、te outside2 122.198.0.0 255.255.0.0 221.12.104.113 1route outside2 123.4.0.0 255.252.0.0 221.12.104.113 1route outside2 123.8.0.0 255.248.0.0 221.12.104.113 1route outside2 123.112.0.0 255.240.0.0 221.12.104.113 1route outside2 123.128.0.0 255.248.0.0 221.12.104.113 1route outside2 123.138.0.0 255.2

29、54.0.0 221.12.104.113 1route outside2 123.144.0.0 255.252.0.0 221.12.104.113 1route outside2 123.148.0.0 255.255.0.0 221.12.104.113 1route outside2 123.152.0.0 255.248.0.0 221.12.104.113 1route outside2 123.188.0.0 255.252.0.0 221.12.104.113 1route outside2 123.232.0.0 255.252.0.0 221.12.104.113 1ro

30、ute outside2 124.64.0.0 255.254.0.0 221.12.104.113 1route outside2 124.66.0.0 255.255.128.0 221.12.104.113 1route outside2 124.67.0.0 255.255.0.0 221.12.104.113 1route outside2 124.88.0.0 255.255.0.0 221.12.104.113 1route outside2 124.89.0.0 255.255.128.0 221.12.104.113 1route outside2 124.89.128.0

31、255.255.128.0 221.12.104.113 1route outside2 124.90.0.0 255.254.0.0 221.12.104.113 1route outside2 124.92.0.0 255.252.0.0 221.12.104.113 1route outside2 124.128.0.0 255.248.0.0 221.12.104.113 1route outside2 124.160.0.0 255.255.0.0 221.12.104.113 1route outside2 124.161.0.0 255.255.0.0 221.12.104.11

32、3 1route outside2 124.162.0.0 255.255.0.0 221.12.104.113 1route outside2 124.163.0.0 255.255.0.0 221.12.104.113 1route outside2 124.164.0.0 255.252.0.0 221.12.104.113 1route outside2 125.32.0.0 255.255.0.0 221.12.104.113 1route outside2 125.33.0.0 255.255.0.0 221.12.104.113 1route outside2 125.34.0.

33、0 255.255.0.0 221.12.104.113 1route outside2 125.35.0.0 255.255.128.0 221.12.104.113 1route outside2 125.35.128.0 255.255.128.0 221.12.104.113 1route outside2 125.36.0.0 255.252.0.0 221.12.104.113 1route outside2 125.40.0.0 255.248.0.0 221.12.104.113 1route outside2 125.211.0.0 255.255.0.0 221.12.10

34、4.113 1route outside2 202.96.0.0 255.255.192.0 221.12.104.113 1route outside2 202.96.64.0 255.255.248.0 221.12.104.113 1route outside2 202.96.72.0 255.255.248.0 221.12.104.113 1route outside2 202.96.80.0 255.255.240.0 221.12.104.113 1route outside2 202.97.128.0 255.255.192.0 221.12.104.113 1route ou

35、tside2 202.97.192.0 255.255.224.0 221.12.104.113 1route outside2 202.97.224.0 255.255.248.0 221.12.104.113 1route outside2 202.97.232.0 255.255.248.0 221.12.104.113 1route outside2 202.97.240.0 255.255.240.0 221.12.104.113 1route outside2 202.98.0.0 255.255.248.0 221.12.104.113 1route outside2 202.9

36、8.8.0 255.255.248.0 221.12.104.113 1route outside2 202.98.16.0 255.255.240.0 221.12.104.113 1route outside2 202.99.0.0 255.255.192.0 221.12.104.113 1route outside2 202.99.64.0 255.255.224.0 221.12.104.113 1route outside2 202.99.96.0 255.255.248.0 221.12.104.113 1route outside2 202.99.104.0 255.255.2

37、48.0 221.12.104.113 1route outside2 202.99.112.0 255.255.240.0 221.12.104.113 1route outside2 202.99.128.0 255.255.224.0 221.12.104.113 1route outside2 202.99.160.0 255.255.248.0 221.12.104.113 1route outside2 202.99.168.0 255.255.248.0 221.12.104.113 1route outside2 202.99.176.0 255.255.240.0 221.1

38、2.104.113 1route outside2 202.99.192.0 255.255.248.0 221.12.104.113 1route outside2 202.99.200.0 255.255.248.0 221.12.104.113 1route outside2 202.99.208.0 255.255.240.0 221.12.104.113 1route outside2 202.99.224.0 255.255.248.0 221.12.104.113 1route outside2 202.99.232.0 255.255.248.0 221.12.104.113

39、1route outside2 202.99.240.0 255.255.240.0 221.12.104.113 1route outside2 202.102.128.0 255.255.248.0 221.12.104.113 1route outside2 202.102.136.0 255.255.248.0 221.12.104.113 1route outside2 202.102.144.0 255.255.240.0 221.12.104.113 1route outside2 202.102.160.0 255.255.224.0 221.12.104.113 1route

40、 outside2 202.102.224.0 255.255.248.0 221.12.104.113 1route outside2 202.102.232.0 255.255.248.0 221.12.104.113 1route outside2 202.102.240.0 255.255.240.0 221.12.104.113 1route outside2 202.106.0.0 255.255.0.0 221.12.104.113 1route outside2 202.107.0.0 255.255.128.0 221.12.104.113 1route outside2 2

41、02.108.0.0 255.255.0.0 221.12.104.113 1route outside2 202.110.0.0 255.255.192.0 221.12.104.113 1route outside2 202.110.64.0 255.255.192.0 221.12.104.113 1route outside2 202.110.192.0 255.255.192.0 221.12.104.113 1route outside2 202.111.128.0 255.255.224.0 221.12.104.113 1route outside2 202.111.160.0

42、 255.255.224.0 221.12.104.113 1route outside2 203.93.8.0 255.255.255.0 221.12.104.113 1route outside2 203.93.9.0 255.255.255.0 221.12.104.113 1route outside2 203.93.10.0 255.255.254.0 221.12.104.113 1route outside2 203.93.12.0 255.255.252.0 221.12.104.113 1route outside2 203.93.16.0 255.255.240.0 22

43、1.12.104.113 1route outside2 203.93.32.0 255.255.224.0 221.12.104.113 1route outside2 203.93.64.0 255.255.192.0 221.12.104.113 1route outside2 203.93.128.0 255.255.248.0 221.12.104.113 1route outside2 203.93.136.0 255.255.252.0 221.12.104.113 1route outside2 203.93.140.0 255.255.255.0 221.12.104.113

44、 1route outside2 203.93.141.0 255.255.255.0 221.12.104.113 1route outside2 203.93.142.0 255.255.254.0 221.12.104.113 1route outside2 203.93.144.0 255.255.240.0 221.12.104.113 1route outside2 203.93.160.0 255.255.224.0 221.12.104.113 1route outside2 203.93.192.0 255.255.192.0 221.12.104.113 1route ou

45、tside2 210.13.128.0 255.255.128.0 221.12.104.113 1route outside2 210.14.160.0 255.255.224.0 221.12.104.113 1route outside2 210.14.192.0 255.255.224.0 221.12.104.113 1route outside2 210.14.224.0 255.255.224.0 221.12.104.113 1route outside2 210.15.32.0 255.255.224.0 221.12.104.113 1route outside2 210.

46、15.64.0 255.255.224.0 221.12.104.113 1route outside2 210.15.96.0 255.255.224.0 221.12.104.113 1route outside2 210.15.128.0 255.255.192.0 221.12.104.113 1route outside2 210.21.0.0 255.255.128.0 221.12.104.113 1route outside2 210.21.128.0 255.255.128.0 221.12.104.113 1route outside2 210.22.0.0 255.255

47、.0.0 221.12.104.113 1route outside2 210.51.0.0 255.255.0.0 221.12.104.113 1route outside2 210.52.0.0 255.255.192.0 221.12.104.113 1route outside2 210.52.64.0 255.255.192.0 221.12.104.113 1route outside2 210.52.128.0 255.255.128.0 221.12.104.113 1route outside2 210.53.0.0 255.255.128.0 221.12.104.113

48、 1route outside2 210.53.128.0 255.255.128.0 221.12.104.113 1route outside2 210.74.96.0 255.255.224.0 221.12.104.113 1route outside2 210.74.128.0 255.255.224.0 221.12.104.113 1route outside2 210.78.0.0 255.255.224.0 221.12.104.113 1route outside2 210.82.0.0 255.254.0.0 221.12.104.113 1route outside2 211.144.0.0 255.254.0.0 221.12.104.113 1route outside2 218.7.0.0 255.255.0.0 221.12.104.113 1route outside2 218.10.0.0 255.255.0.0 221.12.104.113 1route outside2 218.11.0.0 255.255.0.0 221.12.104.113 1route outside2 218.12.0.0 255.255.0.0 221.12.104.113 1route outside2 218.