asa5510-DMZ静态转发.docxVIP

ASA Version 8.2(5) !!interface Ethernet0/0nameif outsidesecurity-level 0ip address XXX.XX.XX.10 !interface Ethernet0/1nameif insidesecurity-level 100ip address 28 !interface Ethernet0/2nameif dmzsecurity-level 50ip address 48 !interface Ethernet0/3shutdownno nameifno security-levelno ip address!interface Management0/0nameif managementsecurity-level 100ip address management-only!ftp mode passiveaccess-list inside-acl extended permit ip any any access-list dmz-acl extended permit ip any any access-list outside-acl extended permit icmp any any access-list outside-acl extended permit ip any host XXX.XX.XX.11 pager lines 24logging asdm informationalmtu management 1500mtu outside 1500mtu inside 1500mtu dmz 1500icmp unreachable rate-limit 1 burst-size 1no asdm history enablearp timeout 14400global (outside) 1 interfacenat (inside) 1 nat (inside) 1 nat (inside) 1 nat (inside) 1 nat (dmz) 1 48nat (dmz) 1 48nat (dmz) 1 40nat (dmz) 1 92static (inside,dmz) 24 netmask 55 static (inside,outside) XXX.XX.XX.11 netmask 55 access-group outside-acl in interface outsideaccess-group inside-acl in interface insideaccess-group dmz-acl in interface dmzroute outside 1route inside 24 1route dmz 48 1route dmz 48 1route dmz 92 1route dmz 40 1timeout xlate 3:00:00timeout conn 1:00:00 half-closed 0:10:00 udp 0:02:00 icmp 0:00:02timeout sunrpc 0:10:00 h323 0:05:00 h225 1:00:00 mgcp 0:05:00 mgcp-pat 0:05:00timeout sip 0:30:00 sip_media 0:02:00 sip-invite 0:03:00 sip-disconnect 0:02:00timeout sip-provisional-media 0:02:00 uauth 0:05:00 absolutetimeout tcp-proxy-reassembly 0:01:00timeout floating-conn 0:00:00dynamic-access-policy-record DfltAccessPolicyhttp server enablehttp managementno snmp-server locationno snmp-server contactsnmp-server enable traps snmp authentication linkup linkdown coldstartcrypto ipsec security-association lifetime seconds 28800crypto ipsec security-association lifetime kilobytes 4608000crypto ca trustpoint _SmartCallHome_ServerCAcrl configurecr