防火墙使用及功能配置.pptxVIP

防火墙使用及功能配置 ;防火墙介绍;防火墙的概念;防火墙术语;对防火墙的需求;Cisco PIX Firewall 515;Cisco PIX515 防火墙;PIX 515 基本配件;Power LED;PIX Firewall 515 模块;PIX Firewall 515双单口连接器;The PIX Firewall 515;通常的连接方案;PIX防火墙通用维护命令;访问模式;PIX 防火墙基本命令;enable 命令;enable password password;write 命令;show 命令;pixfirewall# show interface interface ethernet0 “outside” is up, line protocol is up hardware is i82557 ethernet, address is 0060.7380.2f16 ip address , subnet mask MTU 1500 bytes, BW 1000000 Kbit half duplex 1184342 packets input, 1222298001 bytes, 0 no buffer received 26 broadcasts, 27 runts, 0 giants 4 input errors, 0 crc, 4 frame, 0 overrun, 0 ignored, 0 abort 1310091 packets output, 547097270 bytes, 0 underruns 0 unicast rpf drops 0 output errors, 28075 collisions, 0 interface resets 0 babbles, 0 late collisions, 117573 deferred 0 lost carrier, 0 no carrier input queue (curr/max blocks): hardware (128/128) software (0/1) output queue (curr/max blocks): hardware (0/2) software (0/1) ;pixfirewall# show ip address Building configuration…… System IP Addresses: ip address outside ip address inside ip address dmz Current IP Addresses: ip address outside ip address inside ip address dmz ;hostname and ping 命令;pixfirewall(config)# name bastionhost;telnet 命令;http 命令;PIX防火墙的6个常用命令;PIX防火墙常用命令;nameif hardware_id if_name security_level;interface hardware_id hardware_speed ;ip address if_name ip_address [netmask] ;nat [(if_name)] nat_id local_ip [netmask];;global;;route if_name ip_address netmask gateway_ip [metric];;PAT 配置实例;多个网络的PAT转换;No Network Address Translation (nat 0); PIX防火墙的访问控制;访问控制列表(ACL);access-list;附:比较运算符;access-group;ACL实例;关于static和conduit;实例;;;谢 谢