asa 5510 配置案例(解决端口映射问题)

《asa 5510 配置案例(解决端口映射问题)》由会员上传分享，免费在线阅读，更多相关内容在行业资料-天天文库。

1、ASA5510配置案例(解决端口映射问题).txt老公如果你只能在活一天，我愿用我的生命来延续你的生命，你要快乐的生活在提出分手的时候请不要说还爱我。CiscoASA5505防火墙端口映射问题解决基本情况:WAN:221.221.147.195Gateway:221.221.147.200LAN:192.168.0.1内网中有一台服务器,地址:192.168.0.10端口:8089故障描述:内网可正常连接至服务器,外网无法连接.端口映射出现问题.解决方法:命令行错误,已更正并解决.问题重点:采用"static(inside,outside)221.221.147.195

2、192.168.0.10tcp8089"映射.目前配置如下:ASAVersion7.2(2)!hostnameciscoasaenablepassword8Ry2YjIyt7RRXU24encryptednames!interfaceVlan1nameifinsidesecurity-level100ipaddress192.168.0.1255.255.255.0!interfaceVlan2nameifoutsidesecurity-level0ipaddress221.221.147.195255.255.255.252!interfaceEthernet0/0s

3、witchportaccessvlan2!interfaceEthernet0/1!interfaceEthernet0/2!!interfaceEthernet0/4!interfaceEthernet0/5!interfaceEthernet0/6!interfaceEthernet0/7!passwd2KFQnbNIdI.2KYOUencryptedftpmodepassiveaccess-list101extendedpermittcpanyhost221.221.147.195eq8089access-list101extendedpermiticmpanya

4、nyaccess-list101extendedpermittcpanyanyaccess-list101extendedpermitudpanyanypagerlines24loggingasdminformationalmtuinside1500mtuoutside1500icmpunreachablerate-limit1burst-size1noasdmhistoryenablearptimeout14400global(outside)1interfacestatic(inside,outside)221.221.147.195192.168.0.10netm

5、ask255.255.255.255tcp80890access-group101ininterfaceoutsiderouteoutside0.0.0.00.0.0.0221.221.147.2001timeoutxlate3:00:00timeoutconn1:00:00half-closed0:10:00udp0:02:00icmp0:00:02timeoutsunrpc0:10:00h3230:05:00h2251:00:00mgcp0:05:00mgcp-pat0:05:00timeoutsip0:30:00sip_media0:02:00sip-invite

6、0:03:00sip-disconnect0:02:00timeoutuauth0:05:00absolutehttpserverenablenosnmp-serverlocationnosnmp-servercontactsnmp-serverenabletrapssnmpauthenticationlinkuplinkdowncoldstarttelnettimeout5sshtimeout5consoletimeout0dhcpdauto_configoutside!!class-mapinspection_defaultmatchdefault-inspecti

7、on-traffic!policy-maptypeinspectdnspreset_dns_mapparametersmessage-lengthmaximum512policy-mapglobal_policyclassinspection_defaultinspectdnspreset_dns_mapinspectftpinspecth323h225inspecth323rasinspectrshinspectrtspinspectesmtpinspectsqlnetinspectskinnyinspectsunrpcinspectx