ASA5520实验图谱.docxVIP

ASA5520配置：ASA Version 8.4(2) !hostname CiscoASA5520enable password 8Ry2YjIyt7RRXU24 encryptedpasswd 2KFQnbNIdI.2KYOU encryptednames!interface GigabitEthernet0 nameif outside security-level 0 ip address !interface GigabitEthernet1 nameif inside security-level 100 ip address !interface GigabitEthernet2 shutdown no nameif no security-level no ip address!interface GigabitEthernet3 shutdown no nameif no security-level no ip address!interface GigabitEthernet4 shutdown no nameif no security-level no ip address!interface GigabitEthernet5 shutdown no nameif no security-level no ip address!ftp mode passiveobject network PAT subnet object network host host 0object network NAT host 00object network portnat host 00access-list 102 extended permit icmp any any access-list 102 extended permit tcp any host 00 eq 445 access-list 102 extended permit tcp any host 00 eq www access-list 102 extended permit tcp any host 00 eq www pager lines 24mtu outside 1500mtu inside 1500icmp unreachable rate-limit 1 burst-size 1no asdm history enablearp timeout 14400!object network PAT nat (inside,outside) dynamic interfaceobject network NAT nat (inside,outside) static hostobject network portnat nat (inside,outside) static interface service tcp www 8080 access-group 102 in interface outsideroute outside 1timeout xlate 3:00:00timeout conn 1:00:00 half-closed 0:10:00 udp 0:02:00 icmp 0:00:02timeout sunrpc 0:10:00 h323 0:05:00 h225 1:00:00 mgcp 0:05:00 mgcp-pat 0:05:00timeout sip 0:30:00 sip_media 0:02:00 sip-invite 0:03:00 sip-disconnect 0:02:00timeout sip-provisional-media 0:02:00 uauth 0:05:00 absolutetimeout tcp-proxy-reassembly 0:01:00timeout floating-conn 0:00:00dynamic-access-policy-record DfltAccessPolicyuser-identity default-domain LOCALno snmp-server locationno snmp-server contactsnmp-server enable traps snmp authentication linkup linkdown coldstart warmstarttelnet timeout 5ssh timeout 5 console timeout 0threat-detection basic-threatthreat-detection statistics access-listno threat