asa5520防火墙透明模式的配置例子

《asa5520防火墙透明模式的配置例子》由会员上传分享，免费在线阅读，更多相关内容在行业资料-天天文库。

1、asa5520防火墙透明模式的配置例子ciscoasa#shrun:Saved:ASAVersion7.2(3)!firewalltransparenthostnameciscoasadomain-namedefault.domain.invalidenablepassword8Ry2YjIyt7RRXU24encryptednames!interfaceGigabitEthernet0/0nameifoutsidesecurity-level0!interfaceGigabitEthernet0/1nameifinsidesecurity-l

2、evel100!interfaceGigabitEthernet0/2shutdownnonameifnosecurity-level!interfaceGigabitEthernet0/3shutdownnonameif   nosecurity-level!interfaceManagement0/0nameifmanagementsecurity-level100ipaddress192.168.1.1255.255.255.0management-only!passwd2KFQnbNIdI.2KYOUencryptedftpmodepa

3、ssivednsserver-groupDefaultDNSdomain-namedefault.domain.invalidaccess-listacl_insideextendedpermitipanyanyaccess-listacl_insideextendedpermiticmpanyanyaccess-listacl_outsideextendedpermittcpanyanyeq3306access-listacl_outsideextendedpermittcpanyanyeqwwwaccess-listacl_outsidee

4、xtendedpermittcpanyanyeq8080access-listacl_outsideextendedpermittcpanyanyeqhttpsaccess-listacl_outsideextendedpermittcpanyanyeqsqlnetaccess-listacl_outsideextendedpermittcpanyanyeqftpaccess-listacl_outsideextendedpermittcpanyanyeq1433access-listacl_outsideextendedpermitespan

5、yanyaccess-listacl_outsideextendedpermitudpanyanyeqisakmpaccess-listacl_outsideextendedpermittcpanyanyeqpop3access-listacl_outsideextendedpermittcpanyanyeqsmtpaccess-listacl_outsideextendedpermiticmpanyanypagerlines24mtuoutside1500mtuinside1500mtumanagement1500ipaddress172.1

6、6.177.208255.255.255.0nofailovericmpunreachablerate-limit1burst-size1asdmimagedisk0:/ASDM-523.BINnoasdmhistoryenablearptimeout14400access-groupacl_outsideininterfaceoutsideaccess-groupacl_insideininterfaceinsidetimeoutxlate3:00:00timeoutconn0:20:00half-closed0:10:00udp0:02:0

7、0icmp0:00:02timeoutsunrpc0:10:00h3230:05:00h2251:00:00mgcp0:05:00mgcp-pat0:05:00timeoutsip0:30:00sip_media0:02:00sip-invite0:03:00sip-disconnect0:02:00timeoutuauth0:05:00absolutehttpserverenablehttp192.168.1.0255.255.255.0managementhttp0.0.0.00.0.0.0insidenosnmp-serverlocati

8、onnosnmp-servercontactsnmp-serverenabletrapssnmpauthenticationlinkuplinkdow