cisco pix 防火墙配置介绍（Cisco PIX防火墙配置介绍）.docVIP

cisco pix 防火墙配置介绍（Cisco PIX防火墙配置介绍） Cisco PIX firewall configuration introduction This article describes the actual configuration of a PIX firewall, because the configuration of the router is complementary to the PIX firewall in terms of security, so the configuration instance of the router is listed. PIX firewall 1. sets the external address of the PIX firewall: ipaddressoutside 2. sets the internal address of the PIX firewall: ipaddressinside 10.10.254. This article describes the actual configuration of a PIX firewall, because the configuration of the router is complementary to the PIX firewall in terms of security, so the configuration instance of the router is listed. PIX firewall 1. set the external address of the PIX firewall: ipaddressoutside 2. set the internal address of the PIX firewall: ipaddressinside 3. sets the global address pool required for an internal computer to communicate with a computer on the Internet: global10-54 4. the network address that allows the network address to be is translated into an external address by PIX: nat 5.. The external address of the network management workstation is 131.1.23. 11:static0 6. allows system logs to be sent from RTRA to the network management workstation via the PIX firewall: conduit1514udp131.1. 23.155 7. allows external mail connections to the server (0): mailhost0 8. allow network administrators to manage IPX firewall through remote login: telnet0 9. log all event logs on the log server located on the network management workstation: syslogfacility20.7 Sysloghost0 Router RTRA RTRA is the external protective router, it must be protected from direct attack PIX firewall, FTP/HTTP server, at the same time as a warning system, if someone into the router, management can be notified immediately. 1. block some attacks on the router itself: Noservicetcpsmall-servers Each event 2. forced the router to the system log server sends the router, including access packet and router configuration list refused to change; th