Cisco路由器防火墙配置模板.docVIP

show running-config version 11.2 service timestamps debug datetime msec service timestamps log datetime msec service password-encryption no service udp-small-servers no service tcp-s mall-servers ! hostname fw-rtr ! enable password cisco ! username admin password cisco username chw10.Sydney password cisco no ip source-route ip nat pool inside-pool 54 netmask ip nat inside source list 99 pool inside-pool ip domain-list ip domain-name ip name-server ip inspect name internet smtp ip inspect name internet http java-list 42 timeout 60 ip inspect name internet ftp ip inspect name internet tcp ip inspect name internet udp ip inspect name internet realaudio ip inspect name internet h323 ip inspect name internet cuseeme isdn switch-type basic-net3 clock timezone AEST 10 ! interface Loopback0 ip address ! interface Ethernet0 ip address 53 ip nat inside ip route-cache same-interface ! interface BRI0 no ip address encapsulation ppp dialer pool-member 1 no fair-queue ppp authentication chap callin ppp multilink ! interface Dialer0 description BigPond Dialup Link ip address 2 ip access-group 169 in ip access-group 158 out no ip unreachables no ip directed-broadcast no ip proxy-arp ip nat outside ip inspect internet out encapsulation ppp dialer remote-name chw10.Sydney dialer idle-timeout 999999 dialer stringdialer load-threshold 1 either dialer pool 1 dialer-group 1 no fair-queue no cdp enable ppp chap hostname anixte0 ppp multilink ! ip classless ip route ip route 54 ip http server ip http access-class 1 logging buffered 16000 debugging logging access-list 1 permit 55 access-list 2 deny any access-list 42 permit any access-list 99 permit 55 access-list 101 deny udp any any eq rip access-list 101 permit icmp any any access-list 101 permit ip any any access-list 158 permit icmp any any ac