asa5520常用配置（Asa5520 common configuration）.doc

asa5520常用配置（Asa5520 common configuration） Asa5520 basic configuration 2011-05-10 13:22:49| classification: classification | Tags: | default font and subscriptions. General network organizations to understand asa5520 Extranet -----asa5520---- are intranet and DMZ respectively The ASA configuration is configured in global mode, much like Cisco routing switching (very much the same) There is an initial configuration when connecting to the firewall for the first time The main configuration password, time, internal IP, and management IP 1, configure the host name, domain name, and password Host name: ciscoasa5520 (config) #hostname 5520 Domain name: 5520 (config) #domain - name 123.com Password: 5520 (config) #enable password asa5520 (privileged password) 5520 (config) #password Cisco (telnet password) 2, configure the interface name, security level 5520 (config) #int f0/1 5520 (config) #nameif inside (intranet, DMZ, outside) 5520 (config) #security-level 100 (security level 100, dmz:50, outside:0) 5520 (config) #ip add (configure IP address) 5520 (config) #no shut 5520 (config) #exit View interface show, interface, ipbrief Show interface f/0 3, configure routing 5520 (config) #route interface name, target network mask, next hop Default routing for Internet access 5520 (config) #route, outside, , , 1 5520 (config) #route, inside, , 55, 54 View routing show route 4, management (enable telnet or SSH) 5520 (config) #telnet IP or network mask interface Example: (config) #telnet 0 inside (indicating that only this IP address telnet ASA) is allowed 5520 (config) #telnet inside (indicating permission for this IP segment telnet ASA) Set telnet timeout 5520 (config) #telnet timeout 30 units per minute SSH is ciphertext transport (RSA key pair) 5520 (config), #cryto, key, generate, RSA, modulus, 1024 Connect 5520 (config), #ssh, , , inside 5520 (config) #ssh 00 outside allows any external IP connection Configure free timeout SSH timeout 30 SSH version 2 5 、 remote access ASDM