PIX基础实验.docVIP

试验一.PIX 的基本操作 试验基本连接:PC 通过控制口来登录配置防火墙,在这里我们是通过访问我们的试验台 来登录的.我们这个试验主要来操作下面的基本配置命令. a.hostname设置名称命令 if设置接口名称和优先级 erface激活接口 d.ip add设置接口 IP 地址 e.route设置静态路由 f.passwd enable pass设置远程访问的密码 g.wr mem保持配置 h.wr erase清除配置 i.reload重新启动 进入 PIX 系统；此时系统提示 pixfirewall。 pixfirewall en Password: 直接进入没有密码，第一次，出厂没有被设置 pixfirewall# conf t pixfirewall(config)# hostname fxh 为路由器配置名字 fxh(config)# sh nameif 查询接口名字 nameif ethernet0 outside security0 nameif ethernet1 inside security100 fxh(config)# sh interface 详细查询接口信息，看看是否链路层起来，是派查 错误的必要命令 interface ethernet0 outside is administratively down, 说明没有启动接口 line protocol is up Hardware is i82558 ethernet, address is 0004.ac15.c562 MTU 1500 bytes, BW 10000 Kbit half duplex 407 packets input, 50763 bytes, 0 no buffer Received 407 broadcasts, 0 runts, 0 giants 0 input errors, 0 CRC, 0 frame, 0 overrun, 0 ignored, 0 abort 0 packets output, 0 bytes, 0 underruns 0 output errors, 0 collisions, 0 interface resets 0 babbles, 0 late collisions, 0 deferred 0 lost carrier, 0 no carrier input queue (curr/max blocks): hardware (128/128) software (0/0) output queue (curr/max blocks): hardware (0/0) software (0/0) interface ethernet1 inside is administratively down, line protocol is up Hardware is i82558 ethernet, address is 0004.acc5.465b MTU 1500 bytes, BW 10000 Kbit half duplex 407 packets input, 50763 bytes, 0 no buffer Received 407 broadcasts, 0 runts, 0 giants 0 input errors, 0 CRC, 0 frame, 0 overrun, 0 ignored, 0 abort 0 packets output, 0 bytes, 0 underruns 0 output errors, 0 collisions, 0 interface resets 0 babbles, 0 late collisions, 0 deferred 0 lost carrier, 0 no carrier input queue (curr/max blocks): hardware (128/128) software (0/0) output queue (curr/max blocks): hardware (0/0) software (0/0) fxh(config)# int e0 auto 自动启用接口命令 fxh(config)# int e1 auto fxh(config)# sh inter interface ethernet0 outside is up, line protocol is up Hardware is i82558 ethernet, address is 0004.ac15.c562 MT