公网地址只有一个，是不是不能做端口映射啊。。。
1 E# i" C9 p+ y9 B) v具体配置：/ [/ {6 ~+ e" ~$ T4 X: I
pix515e# show running-config
' J8 `4 @5 {# f, ~1 w- D: Saved# `# i1 g4 K% v2 Y3 ~0 n7 N
:) G5 {7 n" }: B7 [1 r9 L0 f @; R
PIX Version 7.2(2) & O) D* L. v* S- G
!
+ X+ S" k* t# Q% J# S( O4 g' }hostname pix515e
! D& G. ?6 V4 J4 c7 }) ]domain-name Bluesv. t; K8 P7 }- p1 ` o
enable password loy3NqktgLcFhFa5 encrypted
& J; A3 m% ?4 Hnames( h9 B6 }& B& L% ]$ D3 |
!
) S. u4 \' i C' zinterface Ethernet0
4 L" f2 J9 C/ u4 ~; J% O$ | speed 100
# S0 ~" F4 R' _7 g- n7 k duplex full
" {$ z: G1 B, q/ ~" }0 u7 g: k nameif outside
N7 | e$ ~: B3 u security-level 0
* i! q6 a3 D% q3 N8 q4 n5 ^$ w5 Y ip address 222.92.2.74 255.255.255.252 / _- P% j- s* a
!* J7 ?. t! T9 N( G
interface Ethernet1( z! {6 l$ X- j6 G7 }% ^
speed 1009 s/ C6 ~" J5 w4 w" c
duplex full
( H4 Q7 w" \' h9 r& ]$ W' t( _+ S nameif inside
* o( h: ~/ v1 g/ w7 p) T/ ? security-level 1005 F/ u1 O) D) q" c( M1 Q
ip address 192.168.1.1 255.255.255.0
! M6 t/ S7 V% F!
% w3 t" @7 N2 d* W5 Spasswd 2KFQnbNIdI.2KYOU encrypted& e6 D J& H/ o4 u
ftp mode passive; f( x0 l7 m( {! d6 @/ }% ~
dns server-group DefaultDNS" S, P2 x! t4 Z" U2 H Q8 [& r
domain-name Bluesv
$ P* x# X$ r0 M4 X$ K' a/ e8 @6 Qaccess-list outside_cryptomap extended permit ip any 192.168.1.192 255.255.255.192
8 B* @3 i/ d- M, }access-list 101 extended permit tcp any interface outside eq https
; f/ L9 Q7 P7 `+ I! ~; Y( Lpager lines 24
& r% Q; e3 b- ~5 M/ a2 n9 q0 e3 Dmtu outside 1500, v5 k2 [# g5 J3 p3 a
mtu inside 1500( c& ]- s/ F, l4 R( {
ip local pool Bluesv 192.168.1.210-192.168.1.230 mask 255.255.255.0
! V$ [+ V4 J: G+ J8 z) j) L& kno failover
: O+ N' m) r9 a! hicmp unreachable rate-limit 1 burst-size 1
/ W$ X4 k; n* x6 Z i2 Xasdm image flash:/asdm521.bin9 m! h# \1 `1 ~9 b$ T$ l& F( P
no asdm history enable7 ?3 a8 F" W8 M5 @5 j% R
arp timeout 14400( } ~! [* v3 P, @; j: Z
global (outside) 1 interface
/ \# }1 |+ ?# I) D" v! J3 @nat (inside) 1 192.168.1.0 255.255.255.0% u. F& g+ e `) \. B0 g
static (inside,outside) 222.92.2.74 192.168.1.8 netmask 255.255.255.255 6 y, q- I# s$ ?/ M
access-group 101 in interface outside
9 Z4 B0 o. `/ Z. X Vroute outside 0.0.0.0 0.0.0.0 222.92.2.74 1
0 Z$ C2 _! l2 }5 ?timeout xlate 3:00:00
6 O1 a* x* \& G1 i7 Q) _timeout conn 1:00:00 half-closed 0:10:00 udp 0:02:00 icmp 0:00:023 ?" x2 f- `% R% v; H; @
timeout sunrpc 0:10:00 h323 0:05:00 h225 1:00:00 mgcp 0:05:00 mgcp-pat 0:05:00- Q; O0 _. ?5 W2 z
timeout sip 0:30:00 sip_media 0:02:00 sip-invite 0:03:00 sip-disconnect 0:02:00
2 L7 D7 @6 x8 l! Z/ Z+ Ltimeout uauth 0:05:00 absolute
2 _( u2 C- N9 I5 { x Pgroup-policy test internal
, m f/ a Y6 D4 T/ Igroup-policy test attributes) t% w6 c V `- L2 g7 `
dns-server value 61.177.7.1
: ^/ g; J, e* n( D6 \ vpn-tunnel-protocol IPSec
+ j: [6 n% b4 Z3 \ Q2 `( G$ g( qusername admin password AnfkgrVQ2P4TDrCt encrypted privilege 15
; Y/ }! Y" B) m# ]username wangzx password kDSRrtOzFfH2I3Eb encrypted privilege 05 o# {+ [. l3 E0 w; Q8 o# d
username wangzx attributes
9 E. g5 }% X& Y vpn-group-policy test6 |/ \& t$ b: }$ u
aaa authentication telnet console LOCAL : |6 x6 M( v/ @7 m2 ?3 O F
http server enable
" M+ ~7 c" `6 C. D8 y; _http 0.0.0.0 0.0.0.0 inside& ?7 g' M1 G$ `# h
no snmp-server location2 n6 T! S+ d1 A$ c: L
no snmp-server contact5 Y8 U3 L6 B& P: X
snmp-server enable traps snmp authentication linkup linkdown coldstart$ s1 Z9 X+ S: l1 S' m9 ~$ H
crypto ipsec transform-set ESP-3DES-SHA esp-3des esp-sha-hmac
( s+ G. Q+ I! R `9 lcrypto dynamic-map outside_dyn_map 20 set transform-set ESP-3DES-SHA) Z- _# @9 ?/ Y5 R' c/ W* [" `; c
crypto map outside_map 20 ipsec-isakmp dynamic outside_dyn_map
* M: Q* x4 n+ g- X8 kcrypto map outside_map interface outside0 g9 d- j+ D/ c6 Z, p3 i9 r6 n9 x/ L
crypto isakmp enable outside
4 I5 b4 j$ u" c$ Y/ {1 n5 Tcrypto isakmp policy 50
+ A+ {, c) X( w4 O- t authentication pre-share
( U* X4 g ]+ n8 i encryption des
( A2 E4 U- [ g6 a4 s) r" z5 o hash sha4 c. Q7 |+ |$ b& O
group 16 l7 j# Z, f4 b- B3 }, C
lifetime 86400
, n) L/ e0 e" t- H0 jcrypto isakmp policy 802 t: L3 S* t @' W
authentication rsa-sig/ k" Y9 v3 k& X8 o7 K
encryption des2 E3 z6 j6 x' G5 i/ ^
hash sha+ q/ {, @, _ n3 _! |% m p7 H
group 14 ]5 {% c% s1 x. ?
lifetime 86400: n9 b' C5 ]% `2 @% L% D# x9 _
crypto isakmp policy 100. M/ {. C) n5 g! K
authentication crack
' D# R$ L7 J4 R9 U' B encryption 3des
4 ^5 J3 C% x# f( ]1 }$ l" @' ` hash sha$ l- W4 Z9 |6 Q- e- R
group 2" T+ n0 h5 k' }. v1 x8 g7 Z
lifetime 86400& ? S8 i+ f5 o5 M
tunnel-group test type ipsec-ra
. l! I! D2 ]( `7 stunnel-group test general-attributes
1 Q8 e0 @# R/ N address-pool Bluesv# u l' G s! i
default-group-policy test
7 X1 K3 s$ o9 H. x' ]telnet 192.168.1.0 255.255.255.0 inside7 e+ i4 |$ k/ d+ E$ N }( z
telnet timeout 5% A7 L5 _& X1 O6 ]9 n" x' |
ssh timeout 5) ~/ f( o& J ^! k0 M
console timeout 0
B1 J8 p7 O* J, L; |- f!
( ]" E0 j( Y$ C. j5 D+ sclass-map inspection_default
8 `. S# A% {; W: u; {9 P( f match default-inspection-traffic3 F% Z" \9 C: k9 k! Y/ A7 B: F
!
; n0 f0 R& c) o3 R7 Y+ a& w!
* m" v. P( B0 X; b1 Apolicy-map type inspect dns preset_dns_map- b' |. d6 ~" I3 `
parameters3 c/ l9 j) C) s9 C% c) C. n
message-length maximum 512
. \4 c& I& n: q9 ]" Z2 S1 R7 Z- ~policy-map global_policy8 A. A' w, g; z0 X( _3 T7 }4 |
class inspection_default% @! {" a3 Z; \; X, m! i7 v% i
inspect dns preset_dns_map 5 \/ ^1 a, Z( M" Z7 z# V
inspect ftp
$ c" i6 u) [% G. Z, B inspect h323 h225 1 Z+ f: y2 c& y6 j
inspect h323 ras
* d' C& Y& X' s" x: K* F inspect rsh
4 ~2 V7 M9 M d, x+ u* D9 c; q inspect rtsp
/ O7 w& j! v3 ~4 P inspect esmtp
, e* w. h- J; h) m( s- H# m9 L S9 {, q inspect sqlnet * F; y M7 N+ Y s* I
inspect skinny # K6 }2 Y. L3 \6 e$ ]* N. y9 o
inspect sunrpc % L- Q* e8 a/ w
inspect xdmcp
( _5 T5 |. }6 ^4 e3 e inspect sip 9 U* x, ]- I2 |+ ^$ x0 Y* b
inspect netbios - U- a. g5 v1 j2 @
inspect tftp
# o% S4 X( l- j) d' C( q!; ^5 g; N9 G! z& E- X
service-policy global_policy global! S- {' m3 u( N2 p1 l6 y: d5 Z
prompt hostname context
# ^3 r- o% e! {& R. @) vCryptochecksum:acd736395b93796f3acea90762b0e59e$ \' o* c0 C/ Z2 P8 }3 E
: end |
|
所有IT类厂商认证考试题库下载
【新盟教育】2023最新华为HCIA全套视频合集【网工基础全覆盖】---国sir公开课合集
【新盟教育】网工小白必看的！2023最新版华为认证HCIA Datacom零基础全套实战课
原创_超融合自动化运维工具cvTools
重量级~~30多套JAVA就业班全套 视频教程（请尽快下载，链接失效后不补）
链接已失效【超过几百G】EVE 国内和国外镜像 全有了 百度群分享
某linux大佬，积累多年的电子书(约300本)
乾颐堂现任明教教主Python完整版
乾颐堂 教主技术进化论 2018-2019年 最新31-50期合集视频（各种最新技术杂谈视频）
Python学习视频 0起点视频 入门到项目实战篇 Python3.5.2视频教程 共847集 能学102天
约21套Python视频合集 核心基础视频教程（共310G,已压缩）
最新20180811录制 IT爱好者-清风羽毛 - 网络安全IPSec VPN实验指南视频教程
最新20180807录制EVE开机自启动虚拟路由器并桥接物理网卡充当思科路由器
