完整的pix525配置.doc

完整的pix525配置PIX Version 6.3(3)interface ethernet0 100fullinterface ethernet1 100fullinterface gb-ethernet0 1000autointerface gb-ethernet1 1000autonameif ethernet0 cimo security10nameif ethernet1 intf3 security15nameif gb-ethernet0 outside security0nameif gb-ethernet1 inside security100enable password 52network encryptedpasswd 52network encryptedhostname PIX-Adomain-name 52\\配置接口名称，安全级别，主机名，使用的域名 fixup protocol dns maximum-length 512fixup protocol ftp 21fixup protocol h323 h225 1720fixup protocol h323 ras 1718-1719fixup protocol http 80fixup protocol ils 389fixup protocol rsh 514fixup protocol rtsp 554fixup protocol sip 5060fixup protocol skinny 2000fixup protocol smtp 25fixup protocol splnet 1521fixup protocoltftp 69namesaccess-list inside_outbound_nat0_acl permit ip access-list outside_cryptomap_20 permit ip \\ 配置PIX允许的协议类型，要加密保护的数据流量 pager lines 24logging timestamplogging standbylogging trap informationallogging facility 22logging host inside mtu cimo 1500mtu intf3 1500mtu outside 1500mtu inside 1500ip address cimo 52ip address intf3 55ip address outside ip address inside 48ip audit info action alarmip audit attack action alarmfailoverfailover timeout 0:00:00failover poll 15failover replication httpfailover ip address shaying failover ip address intf3 failover ip address outside 9failover ip address inside failover link shaying\\设置日志服务器，PIX各接口的IP地址，PIX设备的故障切换功能 pdm location 92 92 outsidepdm location insidepdm location 8 55 insidepdm location 8 55 insidepdm location 9 55 insidepdm location 0 55 insidepdm location 08 40 insidepdm location 8 40 outsidepdm location 8 40 insidepdm location 28 40 insidepdm location 45 55 outsidepdm location outsidepdm location outsidepdm location 08 40 outsidepdm location insidepdm location outsidepdm location 92 92 outsidepdm location 48 55 outsidepdm location 41 55 outsidepdm logging information 100no pdm history enablearp timeout 14400\\配置能