配置PIX防火墙和VPN的容易使用的PDM

《配置PIX防火墙和VPN的容易使用的PDM》由会员上传分享，免费在线阅读，更多相关内容在行业资料-天天文库。

1、LabExercise—ConfigurethePIXFirewallandanEasyVPNusingPDMObjectivesInthislabexerciseyouwillcompletethefollowingtasks:■ InstallPDM.■ ConfigureinsidetooutsideaccessthroughyourPIXFirewallusingPDM.■ ConfigureSitetoSiteIPSecVPNsusingEasyVPN■ TestandverifythePDMoperation.VisualObjectivesThefollowing

2、figuredisplaystheconfigurationyouwilluseinthislabexercise.LabVisualObjectiveInternetServer172.16.P.10/24172.16.P.1/24Interne.15t0172.16.P.2/24831RouterPIX501172.16.P.3/2410.0.1P.1/2410.0.P.1/24Branch11760Branch2ServerRouterServer192.168.1P.1/2410.0.1P.10/2410.0.P.10/24192.168.1P.2/243005BRAN

3、CH2BRANCH1Concentrator192.168.P.1/24Corporate192.168.P.10/24Server©2002,CiscoSystems,Inc.Allrightsreserved.CSI1.0—7-1ScenarioYourcompanywantstoimplementaVPNfromabranchofficeterminatingatacentrallylocatedCiscoVPN3000Concentrator.Thiswillallowremoteconnectiontothecorporateserver.Youmustconfigu

4、reboththePIXfirewallandtheVPN3000ConcentratorsforVPNaccessusingpre-sharedkeysforauthentication.NetworkParametersUsedinThisLabTable1containstherecommendeddevice/interfaceIPaddressesandsubnetmasksusedinthislabexercise.(whereP=podnumber).Table1—NetworkIPAddressesandSubnetMasksParameterIPAddress

5、SubnetMaskInternetServer172.16.P.10255.255.255.0PIXoutsideInterfaceE0172.16.P.2255.255.255.0PIXInsideInterfaceE110.0.1P.1255.255.255.0VPN3000publicinterface192.168.1P.2255.255.255.0VPN3000privateinterface192.168.P.1255.255.255.0CorporateServer192.168.P.10255.255.255.0VNCpasswordciscoPCpasswo

6、rdforAdministratorcisco3000concentratoradmin/adminusername/passwordDirectionsYourtaskinthislabexerciseistoinstallandconfigurethePIXFirewallandconfiguretheCiscoVPN3000ConcentratortoenableIPSecencryptedtunnelsusingpre-sharedkeys.Performthefollowingtasks:■ Task1—ClearthePIXFirewall’sConfigurati

7、on,andAccessthePIXStartupWizard■ Task2—UsethePDMStartupWizardtoPerformBasicConfigurationTasks■ Task3—VerifytheConfigurationCreatedbythePDMWizard■ Task4—TestbasicConnectivity■ Task5—AddtheBranch2PIXasaremoteuserintheVPN3000Concentrator■ Task6—Testan