cisco-asa-5505基本配置

《cisco-asa-5505基本配置》由会员上传分享，免费在线阅读，更多相关内容在行业资料-天天文库。

1、cisco-asa-5505基本配置interfaceVlan2 nameifoutside  ----------------------------------------对端口命名外端口  security-level0 ----------------------------------------设置端口等级 ipaddressX.X.X.X255.255.255.224      --------------------调试外网地址!interfaceVlan3 nameifinside    ---------------

2、-------------------------对端口命名内端口   security-level100  ----------------------------------------调试外网地址 ipaddress192.168.1.1255.255.255.0    --------------------设置端口等级!interfaceEthernet0/0 switchportaccessvlan2   ----------------------------------------设置端口VLAN与VLAN2绑定!int

3、erfaceEthernet0/1 switchportaccessvlan3  ----------------------------------------设置端口VLAN与VLAN3绑定!interfaceEthernet0/2 shutdown!interfaceEthernet0/3 shutdown!interfaceEthernet0/4 shutdown!interfaceEthernet0/5 shutdown!interfaceEthernet0/6 shutdown!interfaceEthernet0/7 sh

4、utdown!passwd2KFQnbNIdI.2KYOUencryptedftpmodepassivednsdomain-lookupinsidednsserver-groupDefaultDNS name-server211.99.129.210 name-server202.106.196.115access-list102extendedpermiticmpanyany         ------------------设置ACL列表（允许ICMP全部通过）access-list102extendedpermitipanyan

5、y           ------------------设置ACL列表（允许所有IP全部通过）pagerlines24mtuoutside1500mtuinside1500icmpunreachablerate-limit1burst-size1noasdmhistoryenablearptimeout14400global(outside)1interface  ----------------------------------------设置NAT地址映射到外网口nat(inside)10.0.0.00.0.0.0  0---

6、------------------------------NAT地址池（所有地址）0无最大会话数限制access-group102ininterfaceoutside          ------------------―――设置ACL列表绑定到外端口routeoutside0.0.0.00.0.0.0x.x.x.x1       ------------------设置到外网的默认路由timeoutxlate3:00:00timeoutconn1:00:00half-closed0:10:00udp0:02:00icmp0:00:

7、02timeoutsunrpc0:10:00h3230:05:00h2251:00:00mgcp0:05:00mgcp-pat0:05:00timeoutsip0:30:00sip_media0:02:00sip-invite0:03:00sip-disconnect0:02:00timeoutuauth0:05:00absolutenosnmp-serverlocationnosnmp-servercontactsnmp-serverenabletrapssnmpauthenticationlinkuplinkdowncoldstar

8、ttelnet0.0.0.00.0.0.0inside ----------------------------------------设置TELNET所有地址进入telnettimeout5ssh0.0.