cisco ASA防火墙开局配置指南.doc

《cisco ASA防火墙开局配置指南.doc》由会员上传分享，免费在线阅读，更多相关内容在应用文档-天天文库。

一，配置接口配置外网口：interfaceGigabitEthernet0/0nameifoutside定义接口名字security-level0ipaddress111.160.45.147255.255.255.240设定ipnoshut!配置内网口：interfaceGigabitEthernet0/1nameifinsidesecurity-level100ipaddress20.0.0.2255.255.255.252noshut二，配置安全策略access-listoutside_aclextendedpermiticmpanyany配置允许外网pingaccess-groupoutside_aclininterfaceoutside应用策略到outside口access-listinside_access_inextendedpermitipanyany配置允许内网访问外网access-groupinside_access_inininterfaceinside应用到inside口三，设置路由routeoutside0.0.0.00.0.0.0111.160.45.1451配置到出口的默认路由routeinside10.1.0.0255.255.0.020.0.0.11配置到内网的静态路由四，配置natobjectnetworknat_net配置需要nat的内网网段subnet0.0.0.00.0.0.0nat(inside,outside)sourcedynamicnat_netinterface配置使用出接口ip做转换ip五，配置远程管理配置telet管理：telnet0.0.0.00.0.0.0outsidetelnet0.0.0.00.0.0.0insidetelnettimeout30配置ssh管理：cryptokeygeneratersa建立密钥并保存一次wrissh0.0.0.00.0.0.0outsidessh0.0.0.00.0.0.0insidesshtimeout30sshversion1配置用户名密码：usernameadminpasswordyfz4EIInjghXNlcuencryptedprivilege15