ASA5525翻译.docxVIP

1、基础配置类（1、接口配置）interface GigabitEthernet0/0 nameif outside security-level 0 ip address 54 !interface GigabitEthernet0/1 nameif inside security-level 100 ip address ASA5520 !interface GigabitEthernet0/2 nameif outside2 security-level 0 ip address 3 48!interface Management0/0 management-only nameif management security-level 100 ip address 配置解析：总共有2个外网，一个outside（私网），一个Outside2（公网地址），一个内网网段（Inside），一个管理接口（management），值得注意的是，这里内网网段配置是 ip address ASA5520 ，这个ASA5520，对应 54，为什么是这个，下面有说明。（2、names）namesname VPN-networkname MFC-networkname Office-networkname local-guestname wireless-guestname wireless-username core-switchname 53 cpcnet-gatewayname complex-networkname 48 email-servername 54 ASA5520name telephonename 49 welltech-servername Ascanlinkname 51 ftp-servername 30 db-servername 49 edge95name 31 report-servername 33 terminalserver1name 34 terminalserver2name 35 terminalserver3name 36 terminalserver4name 50 web-servername testservername 2 File_Servername 3 HR_Servername 2 ComexServername 52 Yikename 45 c20name VSVN-Server description VSVN-Server配置解析：这个就是把一个IP地址对应一个名称，方便记忆，name 54 ASA5520，这个就是之前地址直接配置的ASA5520的名称，直接对应54（3、路由部分）route outside Ascanlink 70route outside2 8 55 1route outside2 78 55 1route outside2 85 55 1route outside2 8 55 1route outside 55 Ascanlink 1route outside 0 55 Ascanlink 1route outside 1 55 Ascanlink 1route outside 2 55 Ascanlink 1route inside core-switch 1route outside2 1route outside2 1route outside2 1route outside2 1route outside2 1route outside2 1route outside2 1route outside2 1route outside2 1route outside2 1route outside2 1route outside2 1route inside VPN-network core-switch 1route outside2 1route outside2 1route outside2 1route outside2 1route outside2 1route outside2 1route outside2 1route outside2 1route outside2 1route outside2 1route outside2 1route outside2 1route outside2 89 55 1route inside core-switch 1route outside2 55 1配置解析：这里路由有3类，一个去