思科防火墙基本配置.ppt

《思科防火墙基本配置.ppt》由会员上传分享，免费在线阅读，更多相关内容在行业资料-天天文库。

1、Lesson3©2005CiscoSystems,Inc.Allrightsreserved.SNPAv4.0—3-1开始思科安全设备©2005CiscoSystems,Inc.Allrightsreserved.SNPAv4.0—3-2用户接口防火墙访问模式firewall>firewall#firewall#monitor>思科防火墙有4个安全管理访问模式:UnprivilegedPrivilegedConfigurationMonitorInternetpixfirewall>enablepass

2、word:pixfirewall#enable[priv_level]firewall>Usedtocontrolaccesstotheprivilegedmode让你可以访问到其他模式AccessPrivilegeMode访问配置模式:configureterminal命令configureterminalfirewall#Usedtostartconfigurationmodetoenterconfigurationcommandsfromaterminalpixfirewall>enablepassword:p

3、ixfirewall#configureterminalpixfirewall(config)#exitpixfirewall#exitpixfirewall>exitfirewall#Usedtoexitfromanaccessmodepixfirewall>help?enableTurnonprivilegedcommandsexitExitthecurrentcommandmodeloginLoginasaparticularuserlogoutExitfromcurrentcommandmode,andtoun

4、privilegedmodequitExitthecurrentcommandmodepixfirewall>helpenableUSAGE:enable[]DESCRIPTION:enableTurnonprivilegedcommandshelp命令©2005CiscoSystems,Inc.Allrightsreserved.SNPAv4.0—3-7文件管理查看和保存你的配置Thefollowingcommandsenableyoutovieworsaveyourconfiguration

5、:copyrunstartshowrunning-configshowstartup-configwritememorywriteterminalTosaveconfigurationchanges:copyrunstartrunning-configstartup-config(saved)ConfigurationChangesClearingRunningConfigurationfirewall(config)#clearconfigureallClearstherunning-configurationfw1

6、(config)#clearconfigallCleartherunningconfiguration:clearconfigallrunning-configstartup-config(default)ClearingStartupConfigurationfirewall#writeeraseClearsthestartupconfigurationFw1#writeeraseClearthestartupconfiguration:Writeeraserunning-configstartup-config(d

7、efault)ReloadtheConfiguration:reloadCommandRebootsthesecurityapplianceandreloadstheconfigurationRebootscanbescheduledfw1#reloadProceedwithreload?[confirm]yRebooting...reload[noconfirm][cancel][quick][save-config][max-hold-time[hh:]mm[{in[hh:]mm

8、{athh:mm[{monthda

9、y}

10、{daymonth}]}][reasontext]firewall(config)#FileSystemSoftwareImageConfigurationfilePrivatedatafilePDMimageCrashinformationRelease6.andearlierRelease7.andlaterSoftwa