PIX Version 7.1(2) 版本与以前版本配置的一点区别
这个只为本人用到的，还有没有用到的，还请大家补充
配置方法：
进入接口模式
pixfirewall(config)# interface ethernet 0
激活接口
pixfirewall(config-if)# no shutdown
配置接口名称
pixfirewall(config-if)# nameif outside
配置接口IP
pixfirewall(config-if)# ip address 172.16.0.1 255.255.255.0
配置外网路由
pixfirewall(config)# route outside 0 0 192.168.13.1
简单配置如下
pixfirewall(config)# show run
: Saved
:
PIX Version 7.1(2)
!
hostname pixfirewall
enable password 8Ry2YjIytkAXU24 encrypted
names
!
interface Ethernet0
nameif outside
security-level 0
ip address 192.168.10.119 255.255.255.0
!
interface Ethernet1
nameif inside
security-level 100
ip address 192.168.0.1 255.255.255.0
!
passwd FhcseiJbU3Y3p1xG encrypted
ftp mode passive
access-list 101 extended permit ip any any
access-list 101 extended permit icmp any any
pager lines 24
mtu outside 1500
mtu inside 1500
no failover
no asdm history enable
arp timeout 14400
global (outside) 1 interface
nat (inside) 1 0.0.0.0 0.0.0.0
static (inside,outside) 192.168.10.251 192.168.0.67 netmask 255.255.255.255
static (inside,outside) 192.168.10.252 192.168.0.68 netmask 255.255.255.255
static (inside,outside) 192.168.10.253 192.168.0.38 netmask 255.255.255.255
static (inside,outside) 192.168.10.248 192.168.0.48 netmask 255.255.255.255
static (inside,outside) 192.168.10.254 192.168.0.50 netmask 255.255.255.255
static (inside,outside) 192.168.10.116 192.168.0.66 netmask 255.255.255.255
access-group 101 in interface outside
route outside 0.0.0.0 0.0.0.0 192.168.10.1 1
timeout xlate 3:00:00
timeout conn 1:00:00 half-closed 0:10:00 udp 0:02:00 icmp 0:00:02
timeout sunrpc 0:10:00 h323 0:05:00 h225 1:00:00 mgcp 0:05:00
timeout mgcp-pat 0:05:00 sip 0:30:00 sip_media 0:02:00
timeout uauth 0:05:00 absolute
no snmp-server location
no snmp-server contact
snmp-server enable traps snmp authentication linkup linkdown coldstart
telnet 192.168.0.0 255.255.255.0 inside
telnet timeout 5
ssh timeout 5
console timeout 0
!
class-map inspection_default
match default-inspection-traffic
!
!
policy-map global_policy
class inspection_default
inspect dns maximum-length 512
inspect ftp
inspect h323 h225
inspect h323 ras
inspect netbios
inspect rsh
inspect rtsp
inspect skinny
inspect esmtp
inspect sqlnet
inspect sunrpc
inspect tftp
inspect sip
inspect xdmcp
!
service-policy global_policy global
Cryptochecksum:e4ccaa1a2f4b438922c47ba39fb928b2
: end
[ 本帖最后由 9dshh 于 2008-6-15 16:50 编辑 ] |
学习，有时间多发一些基础的最好包括详细解释的，手册搬上来都没有问题：）非常欢迎多发些同类的贴子！