【每日技术分享】思科CCNA/CCNP/CCIE 配置思科虚拟防火墙 |
今天给大家分享一篇思科虚拟防火墙的配置,希望对大家的学习、工作有所帮助!文末有链接可下载查看
实验目的:把一台物理防火墙虚拟为多台防火墙 实验拓扑: 【每日技术分享】思科CCNA/CCNP/CCIE 配置思科虚拟防火墙 ![]() 物理防火墙ASAI基本配置: 启用接口: hostname ASA1 interface Ethernet0/0 no shutdown interface Ethernet0/1 no shutdown interface Ethernet0/2 no shutdown interface Ethernet0/3 no shutdown 创建虚拟防火墙:admin,c1,c2与关联接口 admin-context admin context admin config-url disk0:/admin.cfg context c1 allocate-interface Ethernet0/0 allocate-interface Ethernet0/1 config-url disk0:/c1.cfg context c2 allocate-interface Ethernet0/2 allocate-interface Ethernet0/3 config-url disk0:/c2.cfg 配置虚拟防火墙c1: ASA1(config)# changeto context c1 ASA1/c1(config)# interface Ethernet0/0 nameif Outside security-level 0 ip address 11.1.1.254 255.255.255.0 no shutdown interface Ethernet0/1 nameif Inside security-level 100 ip address 22.1.1.254 255.255.255.0 no shutdown 配置虚拟防火墙c2: ASA1(config)# changeto context c2 ASA1/c2(config)# interface Ethernet0/2 nameif Outside security-level 0 ip address 33.1.1.254 255.255.255.0 no shutdown interface Ethernet0/3 nameif Inside security-level 100 ip address 44.1.1.254 255.255.255.0 no shutdown 切换到物理防火墙: ASA1/c2(config)# changeto system ASA1(config)# 保存配置: ASA1# write memory all 验证查看与切换命令: Show context , show run , changeto system , changeto context c1 , changeto context c2
购买主题
本主题需向作者支付 5 金币 才能浏览
|
| |