电信防火墙配置.docVIP

PIX防火墙新开放端口命令 以山东电信防火墙为例，山东PIX防火墙现配置如下： interface ethernet0 auto interface ethernet1 auto nameif ethernet0 outside security0 nameif ethernet1 inside security100 enable password /Nmy.rMpVso7Cjla encrypted passwd 2KFQnbNIdI.2KYOU encrypted hostname zzvcom domain-name fixup protocol dns maximum-length 512 fixup protocol ftp 21 fixup protocol h323 h225 1720 fixup protocol h323 ras 1718-1719 fixup protocol http 80 fixup protocol rsh 514 fixup protocol rtsp 554 fixup protocol sip 5060 fixup protocol sip udp 5060 fixup protocol skinny 2000 fixup protocol smtp 25 fixup protocol sqlnet 1521 fixup protocol tftp 69 names pager lines 24 mtu outside 1500 mtu inside 1500 ip address outside 44 48 ip address inside ip audit info action alarm ip audit attack action alarm pdm location 55 inside pdm location 1 55 inside pdm location 58 55 inside pdm history enable arp timeout 14400 global (outside) 1 interface nat (inside) 1 0 0 static (inside,outside) tcp interface www www netmask 55 0 0 static (inside,outside) tcp interface ssh ssh netmask 55 0 0 static (inside,outside) tcp 44 8888 8888 netmask 55 0 0 static (inside,outside) tcp 44 9010 9010 netmask 55 0 0 static (inside,outside) tcp 44 sqlnet sqlnet netmask 55 0 0 static (inside,outside) udp 44 snmp snmp netmask 55 0 0 conduit permit tcp host 44 eq www any conduit permit tcp host 44 eq ssh any conduit permit icmp any any conduit permit tcp host 44 eq ssh host 47 conduit permit tcp host 44 eq 8888 any conduit permit tcp host 44 eq 9010 any conduit permit tcp host 44 eq sqlnet any conduit permit udp host 44 eq snmp any route outside 41 1 timeout xlate 3:00:00 timeout conn 1:00:00 half-closed 0:10:00 udp 0:02:00 rpc 0:10:00 h225 1:00:00 timeout h323 0:05:00 mgcp 0:05:00 sip 0:30:00 sip_media 0:02:00 timeout uauth 0:05:00 absolute aaa-server TACACS+ protocol tacacs+ aaa-server RADIUS protocol radius aaa-server LOCAL protocol local http server enable http 1 55 inside http 58 55 inside no snmp-ser