思科防火墙登陆设置过程.docVIP

一、防火墙登陆过程 telnet 输入：123 用户名：en 密码：srmcisco Conf t Show run 二、公网IP与内网IP映射： static (inside,outside) 80 netmask 55 0 0 三、再打开端口：输入以下一笔命今如 access-list acl-out permit tcp any host 83 eq 5800 (打开外部5800端口) access-list acl-out permit tcp any host 83 eq 5900 (打开外部5900端口) access-list acl-out permit tcp any host 83 eq 1433 (打开外部1433端口) access-list acl-in permit tcp any host 83 eq 1433 (打开内部1433端口) access-list acl-in permit tcp any host 83 eq 5900 (打开内部5900端口) access-list acl-in permit tcp any host 83 eq 5800 (打开内部5800端口) 四、登出防火墙：logout 五、增加上网电脑 1、nat (inside) 1 88 55 0 0（上网电脑IP地址） 2、arp inside 88 000f.eafa.645d alias（绑定上网电脑网卡MAC地址） 六、取消上网电脑 1、no nat (inside) 1 88 55 0 0（上网电脑IP地址） 2、no arp inside 88 000f.eafa.645d alias（绑定上网电脑网卡MAC地址） 七、增加可以远程控制防火墙电脑 telnet 88 55 inside 八、保存已做改动设置 wr me 九、以下为现存防火墙配置。 以下每行即为一行命今，如果不见可以从以下黑体字中COPY，进入后粘添，然后保存即可。 User Access Verification Password: Type help or ? for a list of available commands. pix515 conf t Type help or ? for a list of available commands. pix515 en Password: Invalid password Password: ******** pix515# conf t pix515(config)# show run : Saved : PIX Version 6.3(1) interface ethernet0 auto interface ethernet1 auto nameif ethernet0 outside security0 nameif ethernet1 inside security100 enable password gzE5ZoPZ4Fffph7. encrypted passwd PLBb27eKLE1o9FTB encrypted hostname pix515 domain-name fixup protocol ftp 21 fixup protocol h323 h225 1720 fixup protocol h323 ras 1718-1719 fixup protocol http 80 fixup protocol ils 389 fixup protocol rsh 514 fixup protocol rtsp 554 fixup protocol sip 5060 fixup protocol sip udp 5060 fixup protocol skinny 2000 no fixup protocol smtp 25 fixup protocol sqlnet 1521 names access-list acl-out permit ip any any access-list acl-out permit tcp any host 80 eq pop3 access-list acl-out permit tcp any host 80 eq smtp access-list acl-out permit tcp any host 81 eq ftp access-list acl-out deny tcp any any eq 135 access-list acl-out deny udp any any eq 135 access-list acl-out deny udp