pix 防火墙的问题集锦（PIX Firewall problem highlights）.doc

pix 防火墙的问题集锦（PIX Firewall problem highlights） Highlights of the Cisco PIX firewall How do you allow outside users Telnet to PIX outside? Add Licensed Features: VPN-DES: Enabled VPN-3DES: Disabled With SSH, you can. Telnet not! For inside reverse DMZ access, you need to do NAT configuration, for DMZ to inside access, you need To do the configuration of static and access-list. PIX 515E connects ADSL routing MODEM! Want to know how the E0 port is configured to connect with the MODEM that opens the route. Let all users within the network can In order to access the Internet through this MODEM. Thank you ADSL MODEM IP: Pixfirwall (config) #vpdn group group name request dialout PPPoE Pixfirwall (config) #vpdn group group name PPP auth PAP/CHAP/MSCHAP Pixfirwall (config) #vpdn group group name localname dialing user name Pixfirwall (config) #vpdn username user name password password Pixfirwall (config) #ip add interface name - arbitrarily defined PPPoE Help users send help, please help me, as follows: I want to set some web users up to a specific site by setting them on pix 515e The current configuration is as follows: PIX Version 6.3 (3) Interface Ethernet0 Auto Interface ethernet1 Auto NameIf Ethernet0 outside security0 NameIf ethernet1 inside security100 Hostname pixfirewall Fixup protocol DNS maximum-length 512 Fixup protocol FTP 21 Fixup protocol H323 h225 1720 Fixup protocol H323 RAS 1718-1719 Fixup Protocol HTTP 80 Fixup protocol RSH 514 Fixup protocol RTSP 554 Fixup Protocol SIP 5060 Fixup Protocol SIP UDP 5060 Fixup protocol skinny 2000 Fixup Protocol SMTP 25 Fixup protocol sqlnet 1521 Fixup protocol TFTP 69 Names Pager lines 24 MTU outside 1500 MTU inside 1500 IP, address, outside, 2, 52 IP, address, inside, 53, IP, audit, info, action, alarm IP, audit, attack, action, alarm PDM history enable ARP timeout 14400 Global (outside) 3 interface NAT (inside) 3 55 00 NAT (inside) 3 55 00 NAT (inside) 3 1 55 00 NAT (inside) 3 2 55 00 NAT (inside) 3 13 5