思科PIX防火墙设置详解（CISCO PIX firewall settings detailed）.docVIP

思科PIX防火墙设置详解（CISCO PIX firewall settings detailed） CISCO secure PIX firewall 2009-11-05 03:01:00| classification: technical documentation Tags: | | font in Small subscription CISCO PIX firewall settings detailed To configure CISCOs firewall, you need to understand these commands first: Commonly used commands are: nameIf, interface, IP, address, NAT, global, route, static, and so on. Global Specifies the public address range: defines the address pool. The configuration syntax for the Global command: Global (if_name), nat_id, ip_address-ip_address, [netmark, global_mask] Among them: (if_name): indicates the name of the outer network interface, usually outside. Nat_id: set the address pool identifier (NAT to refer to). Ip_address-ip_address: represents a range of IP addresses. [netmark global_mask]: the network mask that represents the global IP address. Nat The address conversion command converts the private IP of the intranet into the extranet ip. Nat command configuration syntax: nat (if_name) nat_id local_ip [netmark] Among them: (if_name): indicates the interface name, typically inside. Nat_id: represents the address pool defined by the global command. Local_ip: indicates the IP address of the intranet. For , all hosts within the network are indicated. [netmark]: subnet mask that represents the internal network IP address. Route The route command defines static routing. Syntax: Route (if_name) 00 gateway_ip [metric] Among them: (if_name) represents the interface name. 00: represents all hosts Gateway_ip: indicates the IP address of the gateway router or the next hop. [metric]: routing cost. The default value is 1. Static Configure the static IP address translation to make the internal address correspond to the external address one by one. Syntax: Static (internal_if_name, external_if_name), outside_ip_addr, inside_, ip_address Among them: Internal_if_name represents an internal network interface with a higher level of security, such as inside. External_if_name rep