防火墙asa5520配置例子

《防火墙asa5520配置例子》由会员上传分享，免费在线阅读，更多相关内容在工程资料-天天文库。

1、CCSP/CCVP-ASA5520配置例子hostnameshafwOldomain-nameheraeus・comenablepasswordnamesiinterfaceGigabitEthernetO/Ononameifnosecurity-levelnoipaddressiinterfaceGigabitEthernetO/0.150vlan150nameifinside_datasecurity-level50ipaddress172.26.24.6255.255.255.252IinterfaceGigabitEthernetO/0.151vian151nameifinside_v

2、oicosecurity-level50ipaddress10.4&&1255.255.255.0!interfaceGigabitEthernetO/1nonameifnosecurity-levelnoipaddressi■interfaceGigabitEthernetO/1.161vlan161nameifwebsecurity-level50ipaddress172.26.30.1255.255.255.0I■interfaceGigabitEthernetO/1.163vlan163nameifsecuresecurity-level50ipaddress172.26.31.125

3、5.255.255.0IinterfaceGigabitEthernetO/2descriptionLAN/STATEEailoverInterfaceforFutureinterfaceGigabitEthernetO/3nonameifnosecurity-levelnoipaddressi■interfaceGigabitEthernetO/3.154vlan154nameifsprintsecurity-level50ipaddress172.26.24.9255.255.255.252I■interfaceManagement0/0nameifoutsidesecurity-leve

4、l50ipaddress222.66.83.18255.255.255.240I■bootsystemdisk0:/asa704-k8.binftpmodepassiveclocktime^onecet8dnsdomain-]ookupinside_datadnsname-server172.26.16.17same-security-trafficpermitinter-interfacesame-security-trafficpermitintra-interfaceobject-groupicmp-typeicmp_echo_requesticmp-objectechoobject-g

5、roupicmp-typeicmp_echo_replyici叩-objectecho-replyport-objecteqtftpobject-groupserviceudpcitrixudpobject-groupicmp-typeICMPechogroup-objecticmp_echo_requestgroup-objecticmp_echo_replyobject-groupserviceudp_tftpudpport-objecteq1604object-groupserviceudp_radiusudpport-objecteq1812object-groupserviceudp

6、_radius_acctudpport-objecteq1813object-groupserviceudp_rsa_5500udpport-objecteq5500object-groupservicetcphttptcpport-objecteqwwwobject-groupservicetcp_http_8080tcpport-objecteq8080port-objecteqhttpsobject-groupservicetcp_ftptcpport-objecteqftpobject-groupservicetcp_ntptcpport-objecteq123object-group

7、serviceudp_ntpudpport-objecteqntpobject-groupservicetcp_smtptcpport-objecteqsmtpobject-groupservicetcp_sshtcpipverifyreverse-pathinterfaceinsidedataipverifyreverse-pathinterfacewebipverifyreverse-path