ASA5505详细配置.docVIP

nterface Vlan2nameif outside?????????????????????????? 对端口命名外端口 security-level 0???????????????????????? 设置端口等级ip address X.X.X.X 24?????? 调试外网地址!interface Vlan3nameif inside??????????????????????????? 对端口命名内端口?? security-level 100?????????????????????? 调试外网地址ip address ???? 设置端口等级!interface Ethernet0/0switchport access vlan 2???????????????? 设置端口VLAN与VLAN2绑定!interface Ethernet0/1switchport access vlan 3???????????????? 设置端口VLAN与VLAN3绑定!interface Ethernet0/2shutdown!interface Ethernet0/3shutdown!interface Ethernet0/4shutdown!interface Ethernet0/5shutdown!interface Ethernet0/6shutdown!interface Ethernet0/7shutdown!passwd 2KFQnbNIdI.2KYOU encryptedftp mode passivedns domain-lookup insidedns server-group DefaultDNSname-server 10name-server 15access-list 102 extended permit icmp any any????????? 设置ACL列表（允许ICMP全部通过）access-list 102 extended permit ip any any??????????? 设置ACL列表（允许所有IP全部通过）pager lines 24mtu outside 1500 mtu inside 1500icmp unreachable rate-limit 1 burst-size 1no asdm history enablearp timeout 14400global (outside) 1 interface????????????????????????? 设置NAT地址映射到外网口nat (inside) 1 ??????????????????????? NAT地址池（所有地址）access-group 102 in interface outside????????? 设置ACL列表绑定到外端口route outside x.x.x.x 1??????? 设置到外网的默认路由timeout xlate 3:00:00timeout conn 1:00:00 half-closed 0:10:00 udp 0:02:00 icmp 0:00:02timeout sunrpc 0:10:00 h323 0:05:00 h225 1:00:00 mgcp 0:05:00 mgcp-pat 0:05:00timeout sip 0:30:00 sip_media 0:02:00 sip-invite 0:03:00 sip-disconnect 0:02:00timeout uauth 0:05:00 absoluteno snmp-server locationno snmp-server contactsnmp-server enable traps snmp authentication linkup linkdown coldstarttelnet inside??????????????????????? 设置TELNET所有地址进入telnet timeout 5ssh outside????????????????????????? 设置SSH所有地址进入ssh timeout 30ssh version 2console timeout 0???????? !dhcpd address 00-99 inside?????????????? 设置DHCP服务器地址池dhcpd dns 10 15 interface inside????? 设置DNS服务器到内网端口dhcpd enable inside??