ASA5505透明模式下完全配置

《ASA5505透明模式下完全配置》由会员上传分享，免费在线阅读，更多相关内容在行业资料-天天文库。

1、ASA5505透明模式下完全配置2008-08-0113:04ciscoasa#showrun:Saved:ASAVersion7.2(3)!firewalltransparenthostnameciscoasadomain-namedefault.domain.invalidenablepassword8Ry2YjIyt7RRXU24encryptednames!interfaceVlan1nameifinsidesecurity-level100!interfaceVlan2nameifoutsidesecurity-level0!inte

2、rfaceEthernet0/0!interfaceEthernet0/1!interfaceEthernet0/2!interfaceEthernet0/3!interfaceEthernet0/4switchportaccessvlan2!interfaceEthernet0/5switchportaccessvlan2!interfaceEthernet0/6!interfaceEthernet0/7!passwd2KFQnbNIdI.2KYOUencryptedftpmodepassivednsserver-groupDefaultDN

3、Sdomain-namedefault.domain.invalidaccess-list111extendedpermittcpanyanyeqftp-dataaccess-list111extendedpermittcpanyanyeqsshaccess-list111extendedpermittcpanyanyeqwwwaccess-list111extendedpermittcpanyanyeq8080access-list111extendedpermittcpanyanyeq6600access-list111extendedpe

4、rmittcpanyanyeq7877access-list111extendedpermittcpanyanyrange20202121access-list111extendedpermittcpanyanyrange68006900access-list111extendedpermittcpanyanyrange52005400access-list111extendedpermiticmpanyanypagerlines24mtuinside1500mtuoutside1500ipaddress192.168.100.100255.2

5、55.255.0icmpunreachablerate-limit1burst-size1asdmimagedisk0:/asdm-523.binnoasdmhistoryenablearptimeout14400access-group111ininterfaceoutsidetimeoutxlate3:00:00timeoutconn1:00:00half-closed0:10:00udp0:02:00icmp0:00:02timeoutsunrpc0:10:00h3230:05:00h2251:00:00mgcp0:05:00mgcp-p

6、at0:05:00timeoutsip0:30:00sip_media0:02:00sip-invite0:03:00sip-disconnect0:02:00timeoutuauth0:05:00absolutehttpserverenablehttp0.0.0.00.0.0.0insidenosnmp-serverlocationnosnmp-servercontactsnmp-serverenabletrapssnmpauthenticationlinkuplinkdowncoldstarttelnet0.0.0.00.0.0.0insi

7、detelnettimeout5sshtimeout5consoletimeout0!class-mapinspection_defaultmatchdefault-inspection-traffic!!policy-maptypeinspectdnspreset_dns_mapparametersmessage-lengthmaximum512policy-mapglobal_policyclassinspection_defaultinspectdnspreset_dns_mapinspectftpinspecth323h225inspe

8、cth323rasinspectrshinspectrtspinspectesmtpinspectsqlnetinspectskinnyinspect