ASA 5505 dm to inside单边流量无法过去反之可以，底安全级别到高安全级别无法过去。
+ W) E- P# h/ s: W4 Y! W! m, t我配置2 n f; K+ W% r1 R
7 y- H' q$ @: Q, Z s& A) z
interface Vlan1
/ R% t1 b5 ]# B0 p, { nameif outside
: j8 b! i, j$ j% D: M+ A+ m security-level 0) Z% T6 X* d7 T* V4 l8 o
ip address pppoe setroute
! G' v! ^9 O2 d# z4 `!
9 s4 [( U, Y5 Q8 V- y6 e# V/ @1 }; Dinterface Vlan10
+ Q1 x& m: }. ^+ C9 ~1 v nameif inside
0 b/ Q$ m7 d- m- k; a A4 T security-level 100
1 K6 _ f/ k- s7 [7 j' L ip address 10.86.206.1 255.255.255.240 ' N- L1 J {2 t+ T1 V
!; Z" s; d' g8 A
interface Vlan208 N. F9 T- v. E0 V) G7 K' F
nameif dmz
: B1 r K) v: [" n0 K7 P security-level 50
/ } [4 P8 n9 H" Y ip address 192.168.2.1 255.255.255.0 6 c4 w9 \1 w2 Y
!
; P( ?6 b4 f/ | y- F7 ainterface Vlan30! K- r$ \* N, U* f
nameif ADSL' s5 g0 u- S5 X; ~0 p' v
security-level 100
6 u- j6 e* f. W0 p' U9 o. G ip address 192.168.1.1 255.255.255.0 1 ~/ u1 R. L- q* `9 k; L& v# a. A
* n" U+ h4 Q4 D A' M+ `access-group 1 in interface outside
: \2 a4 W1 W# c( K' F& Q, s6 {access-group whitelist in interface inside
& o/ s5 {3 w. xaccess-group dmz_inside in interface dmz7 \# [9 C# ]. i/ }1 U2 T
access-group adsl in interface ADSL
7 e1 ?+ g* Z5 |9 w4 Y% O, i1 l) D( L/ s s
access-list 1 extended permit tcp any interface outside eq www
/ p" z* @& y, W: y* D! Waccess-list 1 extended permit tcp any interface outside eq 3389 * U* i& s) [5 V
access-list 1 extended permit icmp any any
: ?/ t' [1 q @ v, \5 a! K2 @5 \ Aaccess-list 1 extended permit tcp any interface outside eq 8080
; v% v+ U3 n* ]2 Laccess-list 1 extended permit ip any any
! C6 m0 n- k( F: W# I5 Xaccess-list whitelist extended permit ip object-group whitelist any 1 r L: n$ m t ?2 Z' i
access-list whitelist extended deny ip any any
# ]5 ]+ q9 w* Daccess-list dmz_inside extended permit icmp any any
$ ^# ^! O* M7 b8 `3 r B3 qaccess-list dmz_inside extended permit ip any any
! X7 A* ~0 E' }2 b& H+ Taccess-list adsl extended permit icmp any any
2 b9 D* h* ^6 f- d. _+ naccess-list adsl extended permit ip any any
- g. q( L4 c; m/ q. ~1 oaccess-list nat0 extended permit ip 10.86.206.0 255.255.255.240 10.0.0.0 255.0.0.0
9 N, C2 _" S: ^+ kaccess-list nat0 extended permit ip 10.86.206.0 255.255.255.240 172.16.0.0 255.240.0.0
$ Z# }8 _; s2 m4 j# s- W5 b4 @access-list outside_cryptomap extended permit ip 10.86.206.0 255.255.255.240 10.0.0.0 255.0.0.0
3 H6 d2 e" k1 Paccess-list outside_cryptomap extended permit ip 10.86.206.0 255.255.255.240 172.16.0.0 255.240.0.0
! s+ w7 y" I% E2 ], T: uaccess-list nonat extended permit ip any any ; e; W9 I: B- t1 ?; B
|
|
所有IT类厂商认证考试题库下载
【新盟教育】2023最新华为HCIA全套视频合集【网工基础全覆盖】---国sir公开课合集
【新盟教育】网工小白必看的！2023最新版华为认证HCIA Datacom零基础全套实战课
原创_超融合自动化运维工具cvTools
重量级~~30多套JAVA就业班全套 视频教程（请尽快下载，链接失效后不补）
链接已失效【超过几百G】EVE 国内和国外镜像 全有了 百度群分享
某linux大佬，积累多年的电子书(约300本)
乾颐堂现任明教教主Python完整版
乾颐堂 教主技术进化论 2018-2019年 最新31-50期合集视频（各种最新技术杂谈视频）
Python学习视频 0起点视频 入门到项目实战篇 Python3.5.2视频教程 共847集 能学102天
约21套Python视频合集 核心基础视频教程（共310G,已压缩）
最新20180811录制 IT爱好者-清风羽毛 - 网络安全IPSec VPN实验指南视频教程
最新20180807录制EVE开机自启动虚拟路由器并桥接物理网卡充当思科路由器
