7 n- [- E& q) O" B( M; a) V主要有以下语句
, C2 U$ _5 }, q6 j& t/ `! Ysame-security-traffic permit intra-interface0 B0 y+ Q, P) f' D3 p* S, W8 N
access-list 100 extended permit ip any any
& j# n, K2 k4 @0 T( \( gaccess-list 101 extended permit tcp any any : w( x! j! L2 c( y1 r4 }
access-list 101 extended permit udp any any 3 j( f. E% C+ I, y
access-list 101 extended permit icmp any any " Z4 ?# c$ M |0 n
global (inside) 1 interface
, H' _9 n) I3 M" v& S4 `9 Iglobal (outside) 1 interface1 [/ s% A z1 e" r0 k
nat (inside) 1 0.0.0.0 0.0.0.0
& J& W$ i7 P6 w4 H; h4 Jstatic (inside,outside) 10.147.149.210 192.168.99.210 netmask 255.255.255.255
. {% z3 c: }9 i' \5 a& j* paccess-group 101 in interface inside, Q( E7 q) F5 |( U7 X+ r
access-group 100 in interface outside
$ T* O6 g8 d7 F% V2 m# Aroute outside 0.0.0.0 0.0.0.0 10.147.149.254 1
1 c: d& i4 j* Mroute inside 192.168.0.0 255.255.0.0 192.168.99.1 1 |