思科ASA防火墙84与70配置区别

《思科ASA防火墙84与70配置区别》由会员上传分享，免费在线阅读，更多相关内容在工程资料-天天文库。

1、思科ASA防火墙8.4与7.0配置区别ASA防火墙8.4与7.0配置区别NetworkObjectNAT配置介绍1.DynamicNAT（动态NAT,动态一对一）实例一：传统配置方法：nat(Inside)110.1.1.0255.255.255.0global(Outside)1202.100.1.100-202.100.1.200［方法(NetworkObjectNAT)objectnetworkOutside-Nat-Poolrange202.100.1.100202.100.1.200objectnetworkInside-Netwo

2、rksubnet10.1.1.0255.255.255.0objectnetworkInside-Networknat(Inside,Outside)dynamicOutside・Nat・Pool实例二：objectnetworkOutside-Nat-Poolrange202.100.1.100202.100.1.200objectnetworkOutside-PAT-Addressobject-groupnetworkOutside-Addressnetwork-objectobjectOutside-Nat-Poolnetwork-ob

3、jectobjectOutside-PAT-AddressobjectnetworkInside-Network(先100-200动态一对一，然后202.100.1.201动态PAT,最后使用接口地址动态PAT)nat(Inside,Outside)dynamicOutside-Addressinterface教主认为这种配置方式的好处是，新的NAT命令绑定了源接口和目的接口，所以不会岀现传统配置影响DMZ的问题(当时需要natO+acl来旁路)2.DynamicPAT(Hide)(动态PAT,动态多对一)传统配置方式：nat(Inside)

4、110.1.1.0255.255.255.0global(outside)1202.100.1.101新配置方法(NetworkObjectNAT)objectnetworkInside-Networksubnet10.1.1.0255.255.255.0objectnetworkOutside-PAT-Addresshost202.100.1.101objectnetworkInside-Networknat(Inside,Outside)dynamicOutside・PAT・Addressor3.StaticNATorStaticNATw

5、ithPortTranslation(静态一对一转换，静态端口转换)实例一：(静态一对一转换)传统配置方式：static(Inside,outside)202.100.1.10110.1.1.1新配置方法(NetworkObjectNAT)objectnetworkStatic-Outside-Addresshost202.100.1.101objectnetworkStatic-Inside-Addresshost10.1.1.1objectnetworkStatic-Inside-Addressnat(Inside,Outside)sta

6、ticStatic-Outside-Addressornat(Inside,Outside)static202.100.1.102<dns>实例二：(静态端口转换)传统配置方式：static(inside,outside)tcp202.100.1.102232310.1.1.123新配置方法(NetworkObjectNAT)objectnetworkStatic-Outside-Addresshost202.100.1.101objectnetworkStatic-Inside-AddressobjectnetworkStati

7、c-Inside-Addressnat(Inside,Outside)staticStatic-Outside-Addressservicetcptelnet2323ornat(Inside,Outside)static202.100.1.101servicetcptelnet23234.IdentityNAT传统配置方式：nat(inside)010.1.1.1255.255.255.255新配置方法(NetworkObjectNAT)objectnetworkInside-Addresshost10.1.1.1objectnetworkI

8、nside-Addressnat(Inside,Outside)staticInside-Addressornat(Inside,Outside)static10.