我在浏览器上想使用PDM，但是却出现以下讯息，不知道谁可以救救我…。1 a, V1 {4 {- i: b i
============================================
2 w( J9 ^+ `0 ~ j% _& A, o: {PDM has encountered a firewall configuration command statement that PDM does not support. / w' n" C0 s+ t! o7 m
configuration parsing has been stopped.
: [+ `9 s, [* N- d1 b+ R, X5 W. P3 G: KPDM access is now limited to the Home and Monitoring views during the current session.
7 d2 s. b% u6 tTo regain access to the rest of PDM, use the command line inte**ce windows to fix unsupported command statement and then refresh PDM with the modified firewall configuration.9 a3 g3 F, l7 r3 Z
$ e1 S8 w# @. |# q
" K7 G1 u( t8 @2 b* o
/ N6 d" ^+ J6 e! g
$ |( Y7 ^0 R. Z3 t5 @% ]* eAccess control list 100 is applied to inte**ce inside for outbound nat 0 and VPN client group vpn3000 for split tunneling.
1 _# n4 {$ H8 q8 SPDM does not support multiple uses of a given Access Control List.
% R" O1 N& X- G2 s
3 i2 G( b5 ^- ?============================================
) L4 }3 p s- n% `! z8 ?
; t& d: u% a% z
" M" D) k3 w0 i7 g, ]
1 `3 z# ^0 {1 D6 c1 m/ A% B; e以下是PIX 515设定
7 c7 M6 a( M. z: I" `====================================================1 d" M1 F' B; g8 d+ C. z
: Saved/ Y2 ?2 ^4 O7 u
:
4 t* |: l& J( A- KPIX Version 6.3(5)
9 Z& z3 o m9 ]( n1 Tinte**ce ethernet0 auto0 J( y2 i/ Y7 [0 N9 t2 o" i6 |
inte**ce ethernet1 auto2 H4 ]; |+ p) T
inte**ce ethernet2 auto( W% F) ~- C r) S7 p' Q
nameif ethernet0 outside security0
( C8 F& B0 j) q& n. qnameif ethernet1 inside security100
/ g3 A$ ]$ l0 W7 ?5 @nameif ethernet2 dmz security50
- }1 _: ~( p2 K+ R7 T( Benable 1234 3ftJIzCjh533nBez encrypted
Z* s$ r4 O$ x0 T. J: R, ^0 p0 `4 U# c8 bpasswd 1234 encrypted
, S' R$ A. F1 Chostname YK-PIX' v$ i6 k4 I/ G5 ^( I7 B
domain-name abc.com' z9 u9 n! W/ ?' I% q
fixup protocol dns maximum-length 512
/ X& V$ p& W( F. N2 g, Zfixup protocol ftp 212 A# B( q M% i6 P6 ?
fixup protocol h323 h225 1720
1 f! R6 a, n$ I, dfixup protocol h323 ras 1718-1719$ m$ B9 x+ P& @7 g' {
fixup protocol http 808 H+ h: I! d6 a, h0 B' F
fixup protocol rsh 5147 T: f) _% i0 C* ^6 v
fixup protocol rtsp 554
2 e2 D: r! S- d: Xfixup protocol sip 5060% C/ T, @3 q) S
fixup protocol sip udp 5060" Q3 g3 z& B$ n' R% e: F
fixup protocol skinny 2000; V6 s9 u. T! Y6 e, L# j
no fixup protocol smtp 25
+ ]' [ D5 X9 h- D$ p4 Mfixup protocol sqlnet 1521
# N1 F0 c' ^* l! ~% d* X. J- {fixup protocol tftp 69
, @7 m6 ?8 j: y4 }9 D$ }+ h0 pnames( v+ @+ ]' _8 L5 [5 m# z+ U A g
access-list 100 permit ip 172.16.128.0 255.255.224.0 172.16.160.0 255.255.224.0 & }) I( _8 c4 N- U# [2 q
access-list 100 permit ip 192.168.2.0 255.255.255.0 172.16.160.0 255.255.224.0
9 P D$ S8 h) Q& x9 saccess-list 100 permit ip 172.16.128.0 255.255.224.0 192.168.101.0 255.255.255.0
/ W9 B; J) V _7 g' Iaccess-list 100 permit ip 192.168.2.0 255.255.255.0 192.168.101.0 255.255.255.0 7 H) g/ m$ L5 I! c) t1 J
access-list 100 permit ip 172.16.64.0 255.255.224.0 192.168.101.0 255.255.255.0 # z+ L4 a$ c9 `
access-list 100 permit ip 172.16.160.0 255.255.224.0 192.168.101.0 255.255.255.0 ; R$ U# I9 I/ f6 i4 G% F1 c* c I( ?" Y
access-list 100 permit ip 172.16.128.0 255.255.224.0 172.16.64.0 255.255.224.0
$ `1 h) i4 x3 E. Saccess-list 100 permit ip 192.168.2.0 255.255.255.0 172.17.128.0 255.255.224.0 * }0 S Q1 D6 C6 J/ N$ {: G& ~7 ]9 U3 k/ b
access-list 100 permit ip 192.168.1.0 255.255.255.0 192.168.101.0 255.255.255.0
# w' [% M$ i- v5 ~" T+ `access-list 100 permit ip 192.168.2.0 255.255.255.0 172.16.64.0 255.255.224.0
& ]$ w1 P/ L' P8 ~/ Vaccess-list 100 permit ip host 61.66.237.6 host 194.117.106.129
" s0 @+ \1 L7 Y, n6 C- S* Raccess-list 100 permit ip 192.168.4.0 255.255.255.0 192.168.101.0 255.255.255.0
+ H, C0 ^7 W& Q/ u3 V6 y: |6 E4 caccess-list 100 permit ip 172.16.160.0 255.255.224.0 172.18.0.0 255.255.0.0
2 D* c& P# R7 E0 Z8 M& Oaccess-list 100 permit ip 172.16.128.0 255.255.224.0 172.18.0.0 255.255.0.0
# l& w4 s' Z V) Gaccess-list 100 permit ip 172.16.100.0 255.255.252.0 192.168.101.0 255.255.255.0
8 T. I$ d! Y0 p. s+ Gaccess-list 100 permit ip 172.16.100.0 255.255.252.0 172.18.0.0 255.255.0.0 4 |, c; Y$ E- f, q
access-list 120 permit ip 172.16.128.0 255.255.224.0 172.16.160.0 255.255.224.0
5 k; I% F0 {$ p0 ^" Taccess-list 120 permit ip 192.168.2.0 255.255.255.0 172.16.160.0 255.255.224.0
/ l* k, B1 }' a+ p) caccess-list 170 permit ip host 61.66.237.6 host 194.117.106.129
4 ] w* ~2 P& S% }* saccess-list 200 permit ip 172.16.128.0 255.255.224.0 172.16.64.0 255.255.224.0 4 N& `- C$ ]& @ B( s' M$ S
access-list outside_acl permit tcp any host 61.66.237.95 eq smtp
+ \1 z: t) O4 N' T3 ]access-list outside_acl permit tcp any host 192.168.4.25 eq smtp
; T1 j# {1 |' \! k, m0 v& Vaccess-list outside_acl permit tcp any host 61.66.237.36 eq www
8 p5 [" S9 ], x% @. G Haccess-list outside_acl permit tcp any host 61.66.237.36 eq ftp
3 L( e0 f$ l; ]2 Xaccess-list outside_acl permit tcp any host 61.66.237.111 eq www
+ ]; y5 V5 T \access-list outside_acl permit tcp any host 61.66.237.96 eq www 8 ]! E$ o+ l1 k( k9 U+ T9 {
access-list outside_acl permit tcp any host 61.66.237.80 eq www
& }7 J. g9 {+ ~; |. }( \3 w Kaccess-list outside_acl permit tcp any host 61.66.237.21 eq ftp
1 |$ {8 |9 e' O; c Jaccess-list outside_acl permit tcp any host 61.66.237.34 eq www 6 m$ ^4 R0 b+ `8 l
access-list outside_acl permit tcp any host 61.66.237.97 eq www
+ [! d K2 H6 W% f# N) g# kaccess-list outside_acl permit tcp any host 61.66.237.97 eq domain 5 M- e# X. q; _" h3 a, p8 S/ f
access-list outside_acl permit udp any host 61.66.237.97 eq domain , I* c1 }8 F- ]4 Z& e+ n9 d
access-list outside_acl permit tcp any host 61.66.237.84 eq www
: ]3 ]. j: R! Z8 H, V/ saccess-list outside_acl permit tcp any host 61.66.237.96 eq https
5 J( C& z2 ]* M5 S( Saccess-list outside_acl permit tcp any host 61.66.237.97 eq https [: L0 \) e/ F0 G% A
access-list outside_acl permit tcp any host 61.66.237.85 eq www
5 l/ v. K+ o; E4 Gaccess-list outside_acl permit icmp any 61.66.237.0 255.255.255.0 echo-reply , e8 D: z* Z: B9 t0 L' V
access-list outside_acl permit icmp any 61.66.237.0 255.255.255.0 time-exceeded
! ~) N5 {4 a8 ?access-list outside_acl permit icmp any host 192.168.4.25 time-exceeded 2 \/ }3 W. ~+ j6 t& j- T
access-list outside_acl permit tcp any host 61.66.237.39 eq www ' z* l3 e }+ G. c1 E4 L" @
access-list outside_acl permit tcp any host 61.66.237.89 eq www H" L( H3 x! B/ i
access-list outside_acl permit tcp any host 61.66.237.17 eq www 5 Z4 W- `. O7 v) H) y/ ]) G
access-list outside_acl permit tcp any host 61.66.237.17 eq https
8 i5 n; L* {6 u, E* o6 Jaccess-list outside_acl permit tcp any host 61.66.237.76 eq www & ^5 O( p" B6 Z* P& Z% w% m- O
access-list outside_acl permit tcp host 58.240.224.3 host 61.66.237.55 3 K7 A0 c3 D1 t7 n; d3 d" _
access-list outside_acl permit tcp 221.224.140.160 255.255.255.240 host 61.66.237.55
5 U, j7 E: m$ V4 q' i$ _* `access-list outside_acl permit tcp host 211.21.10.210 host 61.66.237.249
5 Q0 v0 y$ {$ |9 j1 p0 i. [access-list outside_acl permit tcp any host 61.66.237.96 eq domain
% K, q/ q. L- paccess-list outside_acl permit udp any host 61.66.237.96 eq domain
; Q2 x/ m0 m" baccess-list outside_acl permit tcp any host 61.66.237.17 eq ssh ! F+ m# B/ ^6 n
access-list outside_acl permit tcp any host 192.168.4.17 eq smtp % y" H1 t5 }4 k' j. o6 i7 a
access-list outside_acl permit icmp any host 192.168.4.17 time-exceeded
7 t- i2 c$ @% q- Aaccess-list dmz_acl permit tcp host 192.168.4.21 host 192.168.4.11 eq smtp 3 ^& v' T: U, [1 z. | u
access-list dmz_acl permit icmp 192.168.4.0 255.255.255.0 any echo
. l9 S; {& ]3 F) jaccess-list dmz_acl permit icmp any 192.168.4.0 255.255.255.0 echo-reply
3 u9 r# `! h! [ W8 ^6 I v* Saccess-list dmz_acl permit tcp 192.168.4.0 255.255.255.0 any eq www
- u& U' L, J! U/ ~7 X% paccess-list dmz_acl permit tcp 192.168.4.0 255.255.255.0 any eq https
- `+ \$ q9 b; Uaccess-list dmz_acl permit tcp host 192.168.4.22 host 192.168.4.11 eq smtp 4 g! {% y- {( b* s
access-list dmz_acl permit tcp host 192.168.4.22 host 192.168.4.15 eq smtp , _8 ?7 ]; G! C/ U% f; ^* u2 ]
access-list dmz_acl permit tcp host 192.168.4.25 host 192.168.4.11 eq smtp
* k( ?2 b9 z* u4 o2 ~access-list dmz_acl permit tcp host 192.168.4.25 host 192.168.4.15 eq smtp
1 s5 D0 e+ M- C% @% V" s9 Zaccess-list dmz_acl permit tcp host 192.168.4.22 host 192.168.4.15 eq ldap
; Z" ~+ ?$ _" O% L6 [1 o/ qaccess-list dmz_acl permit tcp host 192.168.4.25 host 192.168.4.15 eq ldap
. [ Y) e& r8 P! B& n) K& y6 Qaccess-list dmz_acl permit tcp host 192.168.4.22 host 192.168.4.10 eq smtp
' v$ W2 Q9 e3 @% T6 \. h/ {: x" naccess-list dmz_acl permit tcp host 192.168.4.25 host 192.168.4.10 eq smtp 3 r C! A1 [0 Z) n* s. O
access-list dmz_acl permit tcp host 192.168.4.22 host 192.168.4.18 eq smtp
5 k1 g& ?5 R# n( @! P. ^access-list dmz_acl permit tcp host 192.168.4.25 host 192.168.4.18 eq smtp 1 y, G4 Z0 e9 I0 ^3 p
access-list dmz_acl permit tcp host 192.168.4.22 host 192.168.4.19 eq smtp 9 i: \( P" s4 U3 q$ Z
access-list dmz_acl permit udp 192.168.4.0 255.255.255.0 any eq ntp
; c( ^4 k5 c6 N! e" A# h" k- oaccess-list dmz_acl permit tcp host 192.168.4.17 host 192.168.4.10 eq smtp ) L% e" R8 H4 ^- X
access-list dmz_acl permit tcp host 192.168.4.17 host 192.168.4.19 eq smtp $ u, u( I5 F8 ~) l& n* ?
access-list dmz_acl permit tcp host 192.168.4.17 any eq smtp
) |% w$ I# b( Z' m/ o, Iaccess-list dmz_acl permit tcp host 192.168.4.17 host 192.168.4.15 eq ldap \ e3 h7 k! S" {* |5 ?( r$ o# k
access-list dmz_acl permit tcp host 192.168.4.17 host 192.168.4.10 eq ldap
$ O: V$ m: E: V5 J5 r: ?. }8 \' E# xaccess-list dmz_acl permit udp 192.168.4.0 255.255.255.0 any eq domain
% b$ i* U" D" A e" O3 }) d+ Paccess-list dmz_acl permit ip 172.16.140.0 255.255.255.0 host 192.168.4.17
6 L' | v' Z; a# @( Vaccess-list dmz_acl permit tcp any host 192.168.4.17 eq ssh
8 R8 e- U% r+ a3 p2 b) _access-list dmz_acl permit tcp host 192.168.4.17 host 192.168.4.11 eq smtp 9 y4 d' U; H* @; o0 z5 K
access-list dmz_acl permit tcp host 192.168.4.17 host 192.168.4.15 eq smtp * I j8 ~1 v" c O) \4 F) @, l$ U0 D
access-list dmz_acl permit tcp host 192.168.4.17 host 192.168.4.18 eq smtp
% P' C1 {' \; C8 R3 {" [access-list dmz_acl permit tcp host 192.168.4.17 host 192.168.4.19
7 h- d7 f; Z5 c3 R; f2 I: x" qaccess-list inside_acl permit ip 172.16.64.0 255.255.224.0 any
9 i8 f* P" H$ Z5 t- aaccess-list inside_acl permit ip 172.16.160.0 255.255.224.0 any ; p" e" l2 ?4 T) D' d
access-list inside_acl permit ip 172.16.100.0 255.255.252.0 any
/ x( D# t m |( G+ K& aaccess-list inside_acl permit ip 192.168.2.0 255.255.255.0 any
& s' V: h: b& ^access-list inside_acl permit ip 192.168.102.0 255.255.255.0 any : r. i3 J( p3 w8 {
access-list inside_acl permit ip host 61.66.237.6 host 194.117.106.129
9 |) I7 F, p% _' }) c( Uaccess-list inside_acl permit ip 172.16.128.0 255.255.254.0 any + F% d6 n0 S ?7 k0 ~# R
access-list inside_acl permit ip 172.16.140.224 255.255.255.240 any 6 b( n- Z* v) L6 e5 M9 }
access-list dmz_nonat permit ip 192.168.4.0 255.255.255.0 192.168.101.0 255.255.255.0 7 z& c4 n2 f3 U
access-list dmz_nonat permit ip host 192.168.4.17 172.18.0.0 255.255.0.0
6 h) t) q4 D3 [8 e# faccess-list dmz_nonat permit ip 192.168.4.0 255.255.255.0 172.16.0.0 255.255.224.0 l8 ~+ S$ n+ z0 c3 P
access-list 210 permit ip 172.16.160.0 255.255.224.0 172.18.0.0 255.255.0.0
, {5 s, d0 C$ m7 Daccess-list 210 permit ip 172.16.128.0 255.255.224.0 172.18.0.0 255.255.0.0 4 K: W9 ~: {: q; c Z5 S# y
access-list 210 permit ip 192.168.4.0 255.255.255.0 172.18.0.0 255.255.0.0
: @1 @. y' j: @" r/ Gaccess-list 210 permit ip 172.16.100.0 255.255.252.0 172.18.0.0 255.255.0.0
) f% P8 e- Y2 {5 gpager lines 24' E: G& E- ^& |. q7 @8 }; L. a
logging on" L: V! G, H, M9 F- L: m3 P
logging times**p
/ F: O. s% Z" p* Xlogging standby+ E# s2 v- |, j8 d& n% W4 z
logging buffered warnings
, `) K4 P& J1 P% B) e6 C0 o3 c0 jlogging trap warnings
/ L \; Z' c; a' Zlogging history debugging: i: R0 }- B. z \
logging host inside 172.16.129.78 17/450004 _- o1 G, I+ Q0 N# M
logging host inside 172.16.134.58
2 G j9 F" H8 b. `( cmtu outside 1500* O# {4 y' F8 g0 g6 }
mtu inside 1500
/ u1 X) B! L) N. j& i! Vmtu dmz 1500 o; [& m0 N1 i5 i$ g
ip address outside 61.66.237.253 255.255.255.0
7 |" n0 T# c9 t8 e% R5 ? bip address inside 172.16.128.2 255.255.254.0! }: ]9 g* O ] M& P
ip address dmz 192.168.4.1 255.255.255.0
# h: q6 z# C4 T5 [; U0 sip audit info action alarm6 Z- x% }& ^; G" K
ip audit attack action alarm
# f2 L' q! l1 cip local pool ippool 192.168.101.1-192.168.101.254
& Q, ?- {1 V7 d: K5 D1 ~pdm location 172.16.128.0 255.255.254.0 inside, q# E! A, b2 d
pdm history enable5 l3 g0 z' v) k& J
arp timeout 14400' j1 v, x, }! B- P& w# R
global (outside) 1 61.66.237.124
- e0 r4 M, O6 u' R+ xglobal (dmz) 1 inte**ce1 u& p9 Q/ _/ v K) p$ [* F
nat (inside) 0 access-list 100
( @- I# ~% d3 v9 W Pnat (inside) 1 192.168.102.0 255.255.255.0 0 0
$ z* L9 p2 P7 S+ e( Onat (inside) 1 172.16.64.0 255.255.224.0 0 0( Z/ z& q4 @- T
nat (inside) 1 172.16.128.0 255.255.224.0 0 0- e* @; ^9 [3 w- r: e6 g, K, x& U
nat (inside) 1 172.16.160.0 255.255.224.0 0 0
% G' Y" e( U/ Nnat (dmz) 0 access-list dmz_nonat5 Z$ N& s3 j n
nat (dmz) 1 192.168.4.0 255.255.255.0 0 0 r6 V' C. `) D8 Z: a. @/ n2 r4 ^: l
static (inside,dmz) 192.168.4.11 172.16.129.11 netmask 255.255.255.255 0 0
# q$ _. E; {/ Q/ R* P9 B. L! Astatic (inside,dmz) 192.168.4.15 172.16.129.13 netmask 255.255.255.255 0 0 + U7 R! M- N# P: ?9 s+ x
static (inside,outside) 61.66.237.6 61.66.237.6 netmask 255.255.255.255 0 0 8 v" O: Q5 b% K2 o' w' F! ^. l, L+ y
static (dmz,outside) 61.66.237.111 192.168.4.111 netmask 255.255.255.255 0 0
+ r Y- \. U" R" b" ]4 `static (inside,outside) 61.66.237.96 172.16.129.21 netmask 255.255.255.255 0 0
% r6 | ?8 r! V4 v9 D, estatic (dmz,outside) 61.66.237.80 192.168.4.80 netmask 255.255.255.255 0 0
9 G' f! {* q: |static (inside,outside) 61.66.237.97 172.16.129.18 netmask 255.255.255.255 0 0
6 Z3 X3 c; J7 e& Q8 f1 q+ Qstatic (dmz,outside) 61.66.237.21 192.168.4.21 netmask 255.255.255.255 0 0 / \+ V- s3 c$ o( R7 K+ q2 |
static (inside,outside) 61.66.237.34 172.16.129.173 netmask 255.255.255.255 0 0
2 ?7 O* L) T+ a/ T2 p: z1 s1 L& mstatic (inside,outside) 61.66.237.36 172.16.129.175 netmask 255.255.255.255 0 0
. _) P% u W: S7 ^* C- y. ^static (inside,outside) 61.66.237.5 61.66.237.5 netmask 255.255.255.255 0 0
/ {* W4 X& w |8 }6 z3 ], q, Sstatic (dmz,outside) 61.66.237.85 192.168.4.85 netmask 255.255.255.255 0 0
/ G# V& a; i5 G: O$ M# b: zstatic (inside,dmz) 192.168.4.18 172.16.129.18 netmask 255.255.255.255 0 0 T! P- m$ a1 A% w% e
static (inside,outside) 61.66.237.39 172.16.129.169 netmask 255.255.255.255 0 0
5 [' j# D: k \. _static (inside,dmz) 192.168.4.19 172.16.129.21 netmask 255.255.255.255 0 0 % x" n2 h, b2 X4 A0 d4 B
static (dmz,outside) 61.66.237.84 192.168.4.84 netmask 255.255.255.255 0 0 - T; R3 J8 O1 s. m7 G, p
static (dmz,outside) 61.66.237.89 192.168.4.89 netmask 255.255.255.255 0 0 * I( K o# {2 M) ^$ T- Y
static (inside,outside) 61.66.237.57 172.16.129.57 netmask 255.255.255.255 0 0 " ~8 y6 p7 K7 c) W. R
static (inside,dmz) 192.168.4.10 172.16.129.23 netmask 255.255.255.255 0 0
1 ]- n% t0 |0 a2 j$ ?static (inside,outside) 61.66.237.249 172.16.129.249 netmask 255.255.255.255 0 0 ' O) {6 E( X1 s
static (inside,outside) 61.66.237.55 172.16.129.55 netmask 255.255.255.255 0 0 * E9 b0 K9 T8 c5 j9 g
static (dmz,outside) 61.66.237.17 192.168.4.16 netmask 255.255.255.255 0 0
* M7 b5 N' |% b4 i1 Mstatic (dmz,outside) 61.66.237.95 192.168.4.17 netmask 255.255.255.255 0 0 5 ]& Y6 z& k8 Z0 p# |
access-group outside_acl in inte**ce outside' ]. R- ^& e; m" C9 k8 M& O- ^
access-group inside_acl in inte**ce inside. D1 J2 C" y+ |2 `/ o
access-group dmz_acl in inte**ce dmz# R' n ^/ l4 {- O9 J
router ospf 1- O! G2 J. v, l& ~
network 172.16.128.0 255.255.224.0 area 0 + i# K! r3 R- N' @
log-adj-changes$ i& i+ a M/ |. W7 u7 ?2 s4 x* ]
route outside 0.0.0.0 0.0.0.0 61.66.237.254 16 y w/ g; N+ `
timeout xlate 3:00:00
2 x& a$ q$ L" B1 vtimeout conn 1:00:00 half-closed 0:10:00 udp 0:02:00 rpc 0:10:00 h225 1:00:00
6 t; E8 g' w* O% r9 d' m/ ctimeout h323 0:05:00 mgcp 0:05:00 sip 0:30:00 sip_media 0:02:00 g+ X; Q3 g: ~. ^0 l' \/ ^
timeout sip-disconnect 0:02:00 sip-invite 0:03:00
3 P. a {! A( ]; B" _& N, z/ Btimeout uauth 0:05:00 absolute
# t+ {$ X; J' Oaaa-server TACACS+ protocol tacacs+
0 L' `2 [1 j, [2 ^; Gaaa-server TACACS+ max-failed-attempts 3
' X6 N. l& L) W: p2 E+ r3 Z8 iaaa-server TACACS+ deadtime 10
( v @# R+ W8 [/ C/ Oaaa-server RADIUS protocol radius
3 W8 `9 f" N* S/ H4 k# Z! I9 Y* ~aaa-server RADIUS max-failed-attempts 3 1 a! Q, k4 g G V/ f& v( T. G% o" r
aaa-server RADIUS deadtime 10 ( j, Q$ g( K& b: y! @( Z7 _) g0 A. r+ w
aaa-server LOCAL protocol local
0 k }7 \' K+ g$ ]2 Z( ` Faaa-server authme protocol tacacs+ 5 `1 B7 q9 h: M$ o C
aaa-server authme max-failed-attempts 3 ! K2 {# R( F: ~/ S5 [- }
aaa-server authme deadtime 10 , z- a! b! l! O+ b
aaa-server authme (inside) host 172.16.129.76 cisco1234 timeout 10
) K# O0 Q1 P6 K% ]( chttp server enable7 U2 ?9 e5 h( w2 y% a& I. F
http 0.0.0.0 0.0.0.0 inside
' b4 _0 O7 k( ^, a7 a0 xsnmp-server host inside 172.16.129.275 J4 {8 t" R5 U
no snmp-server location/ t' }+ q) K V: r; r5 Y/ ^4 z
no snmp-server contact
3 K' j; L% L; x# C, Z+ Dsnmp-server community public
4 ?$ t) w( s+ ^4 h( I$ ^no snmp-server enable traps
4 `/ @1 r" }0 ^: T1 J0 }floodguard enable1 @# C# X0 J' z0 B
sysopt connection permit-ipsec
4 Y$ U1 f# j8 e2 f/ h: K* ccrypto ipsec transform-set myset esp-3des esp-md5-hmac ! S& X6 l$ h( f& m4 X% c
crypto dynamic-map dynmap 40 set transform-set myset
3 B& a7 A1 a! y7 ~6 ~crypto map mymap 10 ipsec-isakmp. _$ G+ D# q& v' _- Y/ y" F
crypto map mymap 10 match address 200: E1 P2 o8 A8 L8 g! G
crypto map mymap 10 set peer 220.128.108.26
; k3 \' U) b8 u' r# D2 acrypto map mymap 10 set transform-set myset, `! P. `0 U. }/ R8 {
crypto map mymap 20 ipsec-isakmp
/ L- I& @) j8 R9 l1 E6 icrypto map mymap 20 match address 1204 t% R6 D, p- z8 R* X% G
crypto map mymap 20 set peer 61.155.20.58
F& p7 }5 q+ g2 F& Vcrypto map mymap 20 set transform-set myset9 P1 R; C2 C# H! j8 S7 ~ H+ V0 Q
crypto map mymap 40 ipsec-isakmp dynamic dynmap) W' T+ L. T$ s/ `9 L# G1 i6 _' H
crypto map mymap 60 ipsec-isakmp
/ e5 O- e' F$ }4 F& |) Rcrypto map mymap 60 match address 170
& @ Q0 g% ~$ l$ {5 |crypto map mymap 60 set peer 194.39.131.166% c+ E! u d1 B8 O x4 a3 B; a5 p
crypto map mymap 60 set transform-set myset1 j3 ~+ c1 X4 K2 l
crypto map mymap 100 ipsec-isakmp
6 R" J3 O, Q# S- J% |( E& N& W! d9 scrypto map mymap 100 match address 210
* r% r" d, l8 e2 qcrypto map mymap 100 set peer 211.20.227.388 S: Q4 c# {2 p/ U K9 ?* ~
crypto map mymap 100 set transform-set myset; K( N; Z5 Q" v
crypto map mymap client configuration address initiate
( u* ?9 X2 Q0 \7 ]crypto map mymap client configuration address respond* V- h# E( R0 H; `% Q# L ]1 y
crypto map mymap client authentication authme / A& U! L7 f/ `/ f) t- p( D
crypto map mymap inte**ce outside0 T) j9 G# F7 x6 ]& s! e
isakmp enable outside! l w; T0 ~( c8 W% F& |8 c! z
isakmp key ******** address 61.155.20.58 netmask 255.255.255.255 - C+ [2 ^2 Q% X- N* K+ _
isakmp key ******** address 194.39.131.166 netmask 255.255.255.255 8 r) }% U! D7 u/ K, `. x
isakmp key ******** address 211.20.227.38 netmask 255.255.255.255 no-xauth no-config-mode
5 E$ X/ o' e. h% fisakmp key ******** address 220.128.108.26 netmask 255.255.255.255
. w/ R% @0 M8 U- Oisakmp identity address
4 E0 f: G2 i, G) d+ kisakmp client configuration address-pool local ippool outside% _/ F' i/ r; l# y: r- ?3 B
isakmp nat-traversal 109 W9 }' t3 T3 [; J
isakmp policy 10 authentication pre-share5 \* s6 I2 e8 z; d
isakmp policy 10 encryption 3des g+ }# f: e1 ~
isakmp policy 10 hash md5
$ b- s r7 d8 H1 x( C" A3 [isakmp policy 10 group 2) w' [# r& H# n$ z- ^
isakmp policy 10 lifetime 86400 B% i X: L4 @, w, j9 _
vpngroup vpn3000 address-pool ippool' e" x0 g+ B9 }. y
vpngroup vpn3000 dns-server 172.16.129.209 h, R3 L, h% D9 ] _# w
vpngroup vpn3000 wins-server 172.16.129.31' h9 {& T' O2 q& V% Z8 R
vpngroup vpn3000 default-domain arima.com.tw( ]9 b T4 G1 W5 F( R$ F6 _) s+ M
vpngroup vpn3000 split-tunnel 1004 P. {: W( f1 N$ n$ s
vpngroup vpn3000 idle-time 18004 v' P2 z7 M2 X2 k
vpngroup vpn3000 password ********
! j( z+ }/ \: Ntelnet 172.16.128.0 255.255.254.0 inside
- g, P/ x0 d6 o& Atelnet 172.16.100.0 255.255.252.0 inside* O/ k0 ?5 W: b- G7 |' Q+ {$ Z! W, [
telnet 192.168.1.0 255.255.255.0 inside d2 M0 V8 |; d2 Z, [
telnet timeout 60; i0 t5 U8 {/ J8 T: K; n
ssh 0.0.0.0 0.0.0.0 outside9 q# _5 W! t# l6 w8 U2 e' J7 f2 p
ssh timeout 5, X# l, O% z* S1 T! x6 T
c**ole timeout 0! v R$ S; g8 ]. h1 w! [ Z
username abcd password 1234 encrypted privilege 2
, s4 ?2 \: p/ J' N. fterminal width 80
5 d: }* t( P' lCryptochecksum:340de3230898696e8ef4fa2a4f86c075
; B" C4 L0 F2 A- z- m: end! w9 X* `1 V. g
) g: u5 N" o2 [$ c! {1 e& j+ u. }* p8 G' r
; q5 \, Z* t4 ]% f================================================ |
|
所有IT类厂商认证考试题库下载
【新盟教育】2023最新华为HCIA全套视频合集【网工基础全覆盖】---国sir公开课合集
【新盟教育】网工小白必看的！2023最新版华为认证HCIA Datacom零基础全套实战课
原创_超融合自动化运维工具cvTools
重量级~~30多套JAVA就业班全套 视频教程（请尽快下载，链接失效后不补）
链接已失效【超过几百G】EVE 国内和国外镜像 全有了 百度群分享
某linux大佬，积累多年的电子书(约300本)
乾颐堂现任明教教主Python完整版
乾颐堂 教主技术进化论 2018-2019年 最新31-50期合集视频（各种最新技术杂谈视频）
Python学习视频 0起点视频 入门到项目实战篇 Python3.5.2视频教程 共847集 能学102天
约21套Python视频合集 核心基础视频教程（共310G,已压缩）
最新20180811录制 IT爱好者-清风羽毛 - 网络安全IPSec VPN实验指南视频教程
最新20180807录制EVE开机自启动虚拟路由器并桥接物理网卡充当思科路由器
