5510防火墙配置(尚阳)

《5510防火墙配置(尚阳)》由会员上传分享，免费在线阅读，更多相关内容在工程资料-天天文库。

1、SHENZHEN-ASA#showrun:SavedASAVersion8.2(5)I•hostnameSHENZHEN-ASAenablepasswordoNdtPoaeGUeBWVgtencryptedpasswdoNdtPoaeGUeBWVgtencryptednamesi■interfaceEthernetO/Oshutdownnonameifsecurity-level100noipaddressi■interfaceEthernetO/1name讦insidesecurity-level100ipaddress10.

2、1.5.1255.255.255.248I•interfaceEthernetO/2descriptionto_Dianxingnameifoutsidelsecurity-level0ipaddress183.62.194.98255.255.255.248I•interfaceEthernetO/3shutdownnoname讦nosecurity-levelnoipaddressi•interfaceManagementO/Dnameifmanagementsecurity-level100ipaddress192.168

3、.1.1255.255.255.Omanagement-onlyi•ftpmodepassivednsdomain-lookupoutsideldnsdomairvlookupmanagementobject-groupnetworkS乙NETWORKnetwork-object10.1.6.0255.255.255.0network-object10.1.7.0255.255.255.0network-object10.1.8.0255.255.255.0network-object10.1.9.0255.255.255.0o

4、bject-groupnetworkSH-NETWORKnetwork-object10.1.1.0255.255.255.0network-object10.1.2.0255.255.255.0network-object10.1.3.0255.255.255.0network-object10.40.8.0255.255.255.0object-groupnetworkBJ-NETWORKnetwork-object10.10.0.0255.255.0.0object-groupnetworkSZGL-NETWORKnetw

5、ork-object192.168.15.0255.255.255.0network-object192.168.17.0255.255.255.0network-object192.168.11.0255.255.255.0network-object192.168.18.0255.255.255.0network-object192.168.13.0255.255.255.0access-listshenzhen・to・shanghaiextendedpermitipobject-groupSZ-NETWORKobject-

6、groupSH-NETWORKaccesslistipextendedpermitipanyanyaccess-listoutside-insideextendedpermittcpanyhost183.238.211.162eq5230access-listoutside-insideextendedpermittcpanyhost183.238.211.162eq5050access-listshenzhen-to-beijingextendedpermitipobject-groupS乙NETWORKobject-grou

7、pBJ-NETWORKaccesslistsplit-sslstandardpermit10.1.6.0255.255.255.0access-listsplit-sslstandardpermit10.1.7.0255.255.255.0access-listsplit-sslstandardpermit10.1.1.0255.255.255.0access-listsplit-sslstandardpermit10.10.1.0255.255.255.0access-listsplit-sslstandardpermit10

8、.80.1.0255.255.255.0access-listsplit-sslstandardpermit10.40.8.0255.255.255.0access-listsplit-sslstandardpermit10.30.6.0255.255.255.