Cisco路由器防火墙配置模板

《Cisco路由器防火墙配置模板》由会员上传分享，免费在线阅读，更多相关内容在工程资料-天天文库。

1、showrunning-configversion11.2servicetimestampsdebugdatetimemsecservicetimestampslogdatetimemsecservicepassword-encryptionnoserviceudp-smal1-serversnoservicetcp-small-serversi■hostnamefw~rtrI■enablepasswordciscoi■usernameadminpasswordciscousernamechwlO.Sydneypasswordcisconoipsource-routeipnatpo

2、olinside-pool203.1.1.2203.1.1.254netmask255.255.255.0iprmtinsidesource1ist99poolinside-poolipdomain-listdomain,comipdomain-namedomain,comipname-server192.168.1.1ipinspectnameinternetsmtpipinspectnameinternethttpjava-list42timeout60ipinspectnameinternetftpipinspectnameinternettepipinspectnamein

3、ternetudpinspectnameinternetrealaudioipinspectnameinterneth323ipinspectnameinternetcuseemeisdnswitch-typebasic-net3clocktimezoneAEST10i■interfaceLoopbackOipaddress203.1.1.1255.255.255.0IinterfaceEthernetOipaddress192.168.1.253255.255.255.0ipnatinsideiproute-cachesame-interfaceiinterfaceBRIOnoi

4、paddressencapsulationpppdialerpool-member1nofair-queuepppauthenticationchapcallinpppmultilinkI■interfaceDialerOdescriptionBigPondDialupLinkipaddress139.130.98.32255.255.254.0ipaccess-group169inipaccess-group158outnoipunreachablesnoipdirected-broadcastnoipproxy-arpipnatoutsideipinspectinterneto

5、utencapsulationpppdialerremote-namechwlO.Sydneydialeridle-timcout999999dialerstring84486000dialerload-threshold1eitherdialerpool1dialer-group1nofair-queuenocdpenablepppchaphostnameanixteOpppmultilinkI■ipclasslessiproute0.0.0.00.0.0.0139.130.98.1iproute192.168.0.0255.255.0.0192.168.1.254iphttps

6、erveriphttpaccess-class1loggingbuffered16000debugginglogging192.168.1.1access-list1permit192.168.1.00.0.0.255access-list2denyanyaccess_list42permitanyaccess-list99permit192.168.0.00.0.255.255access-list101denyudpanyanyeqripaccess-list101permiticmpanyanyaccess-list101permitipanyanyaccess-list15

7、8permiticmpanyanyaccess-list158permitudpanyanyaccess-list158permittcpanyanyaccess-list158denyipanyanylog-inputaccess-list159permiticmpanyanyaccess-list159permitipanyanyaccess-list159permittcpanyanyeqsmtpaccess-!ist159permittcpanyanyeqww