资源预览内容
第1页 / 共4页
第2页 / 共4页
第3页 / 共4页
第4页 / 共4页
亲,该文档总共4页全部预览完了,如果喜欢就下载吧!
资源描述
作者:金振宇日期:2008-5-1319:47:5实例需求:CiscoASA5520防火墙用于内部多个vlan之间互相通讯拓扑图:ASA5520vrOVian 20Vian配置实例:asa防火墙配置:SavedASAVersion7.0(7)!hostname*enablepasswordGSk/3FjsRAiPoooiencryptednamesdns-guard!interfaceGigabitEthernet0/0shutdownnameifoutsidesecurity-level0noipaddress!interfaceGigabitEthernet0/1nonameifnosecurity-levelnoipaddress!interfaceGigabitEthernet0/1.1vlan10nameifTest1security-level99ipaddress!interfaceGigabitEthernet0/1.2vlan20nameifTest2security-level98ipaddress!interfaceGigabitEthernet0/1.3vlan30nameifTest3/启用子接口连接vlan10安全及别99,分配地址/启用子接口连接vlan20,安全及别98,分配地址/启用子接口连接vlan30安全及别97,分配地址security-level97ipaddress!interfaceGigabitEthernet0/2shutdownnonameifnosecurity-levelnoipaddress!interfaceGigabitEthernet0/3descriptionLANFailoverInterface!interfaceManagement。/。nameifmanagementsecurity-level100ipaddressmanagement-only!/设置访问列表,允许全通过,为了测试方便passwd2KFQnbNIdI.2KYOUencryptedftpmodepassiveaccess-listacl_Test1extendedpermiticmpanyanyaccess-listacl_Test1extendedpermitipanyanyaccess-listacl_Test2extendedpermiticmpanyanyaccess-listacl_Test2extendedpermitipanyanyaccess-listacl_Test3extendedpermiticmpanyanyaccess-listacl_Test3extendedpermitipanyanyaccess-listnonatextendedpermitipanyany/这个acl是用在bypassnat所用*pagerlines24loggingasdminformationalmtumanagement1500mtuoutside1500mtuTest11500mtuTest21500mtuTest31500failoverfailoverlanunitprimaryfailoverlaninterfacefailoverGigabitEthernet0/3failoverkey*failoverinterfaceipfailoverstandbynoasdmhistoryenablearptimeout14400nat(Test1)0access-listnonat/把互通的子接口启用bypassnat,让子接口各vlan数据互通*nat(Test2)0access-listnonatnat(Test3)0access-listnonataccess-groupacl_Test1ininterfaceTest1/把相应的访问列表设置在对应的接口上*access-groupacl_Test2ininterfaceTest2access-groupacl_Test3ininterfaceTest3!policy-mapglobal_policyclassinspection_defaultinspectdnsmaximum-length512inspectftpinspecth323h225inspecth323rasinspectrshinspectrtspinspectesmtpinspectsqlnetinspectskinnyinspectsunrpcinspectxdmcpinspectsipinspectnetbiosinspecttftp
网站客服QQ:2055934822
金锄头文库版权所有
经营许可证:蜀ICP备13022795号 | 川公网安备 51140202000112号