cisco-asa-5505基本配置.doc

cisco-asa-5505基本配置 cisco-asa-5505基本配置 interface Vlan2 nameif outside 对端口命名外端口 security-level 0 设置端口等级 ip address X.X.X.X 24 调试外网地址 ! interface Vlan3 nameif inside 对端口命名内端口 security-level 100 调试外网地址 ip address 设置端口等级 ! interface Ethernet0/0 switchport access vlan 2 设置端口VLAN与VLAN2绑定 ! interface Ethernet0/1 switchport access vlan 3 设置端口VLAN与VLAN3绑定 ! interface Ethernet0/2 shutdown ! interface Ethernet0/3 shutdown ! interface Ethernet0/4 shutdown ! interface Ethernet0/5 shutdown ! interface Ethernet0/6 shutdown ! interface Ethernet0/7 shutdown ! passwd 2KFQnbNIdI.2KYOU encrypted ftp mode passive dns domain-lookup inside dns server-group DefaultDNS name-server 10 name-server 15 access-list 102 extended permit icmp any any 设置ACL列表（允许ICMP全部通过） access-list 102 extended permit ip any any 设置ACL列表（允许所有IP全部通过） pager lines 24 mtu outside 1500 mtu inside 1500 icmp unreachable rate-limit 1 burst-size 1 no asdm history enable arp timeout 14400 global (outside) 1 interface 设置NAT地址映射到外网口 nat (inside) 1 0NAT地址池（所有地址）0无最大会话数限制 access-group 102 in interface outside ―――设置ACL列表绑定到外端口 route outside x.x.x.x 1 设置到外网的默认路由 timeout xlate 3:00:00 timeout conn 1:00:00 half-closed 0:10:00 udp 0:02:00 icmp 0:00:02 timeout sunrpc 0:10:00 h323 0:05:00 h225 1:00:00 mgcp 0:05:00 mgcp-pat 0:05:00 timeout sip 0:30:00 sip_media 0:02:00 sip-invite 0:03:00 sip-disconnect 0:02:00 timeout uauth 0:05:00 absolute no snmp-server location no snmp-server contact snmp-server enable traps snmp authentication linkup linkdown coldstart telnet inside 设置TELNET所有地址进入 telnet timeout 5 ssh outside 设置SSH所有地址进入 ssh timeout 30 ssh version 2 console timeout 0 ! dhcpd address 00-99 inside 设置DHCP服务器地址池 dhcpd dns 10 15 interface inside 设置DNS服务器到内网端口 dhcpd enable inside 设置DHCP应用到内网端口 ! 前几天去客户那调试CISCO-ASA-5505设备,第一次摸,跟PIX一样,呵呵.没有技术含量,都是最基本的.其他业务配置暂时没配,会及时更新的. Cisco ASA5505配置 cisco, config, telnet, 防火墙, Cisco 1.配置防火墙名