PIX-试验.pptVIP

PIX的基本操作实验 PIX实验拓扑结构 实验基本连接:PC 通过控制口来登录配置防火墙,在这里我们是通过访问我们的试验台 来登录的. PIX实验基本内容 这个实验主要来操作下面的基本配置命令. a.hostname 设置名称命令 b.nameif 设置接口名称和优先级 c.interface 激活接口 d.ip add 设置接口 IP地址 e.route 设置静态路由 f.passwd enable pass 设置远程访问的密码 g.wr mem 保持配置 h.wr erase 清除配置 i.reload 重新启动 PIX实验过程 进入 PIX系统；此时系统提示 pixfirewall。 pixfirewall en Password: 直接进入没有密码，第一次，出厂没有被设置 pixfirewall# conf t pixfirewall(config)# hostname fxh 为路由器配置名字 fxh(config)# sh nameif 查询接口名字 nameif ethernet0 outside security0 nameif ethernet1 inside security100 fxh(config)# sh interface 详细查询接口信息，看看是否链路层起来，是派查错误的必要命令 interface ethernet0 outside is administratively down, 说明没有启动接口 line protocol is up PIX实验过程 Hardware is i82558 ethernet, address is 0004.ac15.c562 MTU 1500 bytes, BW 10000 Kbit half duplex 407 packets input, 50763 bytes, 0 no buffer Received 407 broadcasts, 0 runts, 0 giants 0 input errors, 0 CRC, 0 frame, 0 overrun, 0 ignored, 0 abort 0 packets output, 0 bytes, 0 underruns 0 output errors, 0 collisions, 0 interface resets 0 babbles, 0 late collisions, 0 deferred 0 lost carrier, 0 no carrier input queue (curr/max blocks): hardware (128/128) software (0/0) output queue (curr/max blocks): hardware (0/0) software (0/0) PIX实验过程 interface ethernet1 inside is administratively down, line protocol is up Hardware is i82558 ethernet, address is 0004.acc5.465b MTU 1500 bytes, BW 10000 Kbit half duplex 407 packets input, 50763 bytes, 0 no buffer Received 407 broadcasts, 0 runts, 0 giants 0 input errors, 0 CRC, 0 frame, 0 overrun, 0 ignored, 0 abort 0 packets output, 0 bytes, 0 underruns 0 output errors, 0 collisions, 0 interface resets 0 babbles, 0 late collisions, 0 deferred 0 lost carrier, 0 no carrier input queue (curr/max blocks): hardware (128/128) software (0/0) o