最近发现有几个网站通过PIX535无法访问，大部分网站没这问题。有没有高手帮看看配置，有没什么问题，谢谢！
4 e" p! N- s1 i6 J# K w pix535# sh run
4 u- [& h( V3 ]: P% _: ` z( z- b: Saved2 j7 M0 \6 m) @: h
:
. k- k$ w h. a1 n2 PPIX Version 7.0(8)- k5 m* {* C+ P$ v5 m/ b0 [
!
7 }5 c" U% |4 \& ]% e7 o0 Bhostname pix535
! j1 X+ j) y. ^: [9 q3 ]enable password 1hgufG8l2XmFgqEo encrypted$ r' {5 c- u6 Q1 ]" A/ S) S
passwd Hs5rpgCNixnIVAbU encrypted( f8 @1 y8 u! ~/ o& t+ [
names
8 D0 ^! {/ c" M T% x5 }no dns-guard
- i! @) K) L* ~" T ~, ~) P!! H5 j$ A- s4 Y0 k8 r6 C
interface GigabitEthernet0
: X1 S2 C% q; ?- x @+ n/ vnameif outside6 H6 E4 X4 ~8 J+ ~. x
security-level 0* t! ]' Z7 d; q# ?
ip address 10.101.253.6 255.255.255.252# a* X* a' x. h+ M
!
: k0 j* T! V. N1 }! m$ Q# s+ binterface GigabitEthernet1
; i. n k- ?6 J2 w4 P+ q3 T4 N' Unameif inside
' i) K# r" V5 r; \security-level 1004 ]( X( X: e# u g' l$ I0 K
ip address 10.100.253.130 255.255.255.252
9 ]0 S$ s; |8 D8 r" y& R!4 O" x6 N, P S/ _# B5 u
interface Ethernet0
' V0 L- q% J! G& d9 M* wshutdown1 }, W/ l# e6 w. ~" x
no nameif4 i- C) X4 Q; W. M9 e; v
no security-level
* v' I. m) ]8 G) Yno ip address+ j: k0 f1 l) c
!
& N' z0 e, C8 \7 U) x7 g: s, Ninterface Ethernet1
m7 O9 }9 q$ h5 ^5 R+ vshutdown
+ U4 h2 h* C- nno nameif
9 w( M3 [. ~2 A- w% ~no security-level
* I2 T; o9 X) z g9 ?& r1 Kno ip address, c9 P# C! P& [. L
!6 k9 f, P9 R/ P' k! A
boot system flash:/pix708.bin4 s+ h9 j2 t$ Q) d4 a4 c8 z
ftp mode passive) i, i/ z/ m7 N& s) g1 O6 _1 t6 C
access-list acl_outside extended permit icmp any any
+ j+ A* D! i$ n% `5 q8 G4 J maccess-list acl_outside extended permit ip any any0 {4 O- X! T4 s" t0 r! X
access-list acl_outside extended permit icmp any any traceroute2 U! d8 x6 R* P% j; T
access-list acl_outside extended permit esp any any
7 K/ D# t! h/ b. k% z8 S5 S6 e: Gaccess-list acl_outside extended permit gre any any& w! o0 j2 t) b
access-list acl_inside extended permit ip any any- A; L( o: y6 q2 Z
access-list acl_inside extended deny tcp any any eq 135
1 j5 [2 @! o2 x" Saccess-list acl_inside extended deny udp any any eq 135
A$ \5 Q( N; p5 Daccess-list acl_inside extended deny tcp any any eq 137 `, V) D3 c% q9 | Y! U3 b( S- x
access-list acl_inside extended deny tcp any any eq 1383 Y7 ^) y2 G$ [! A9 l* p0 q
access-list acl_inside extended deny udp any any eq 139' S+ b. ~6 c9 W/ P( K- S
access-list acl_inside extended deny tcp any any eq 445
5 Q8 Q, |6 @) C2 X; q6 b7 aaccess-list acl_inside extended deny tcp any any eq 9996
. O2 g' J9 L7 s o2 ]6 N% f* Kaccess-list acl_inside extended deny tcp any any eq 55547 l7 ?9 u g& l+ A
access-list acl_inside extended deny tcp any any eq 10688 n+ c# M' ^. G( H
access-list acl_inside extended deny udp any any eq 10262 i0 r& x: Y) v8 O7 N
access-list acl_inside extended deny tcp any any eq 1027
4 {; o' C8 V0 J% A) q+ _access-list acl_inside extended deny udp any any eq 10275 D9 Q8 v) w& e; |; E) o
access-list acl_inside extended deny tcp any any eq 14343 i& j$ V. S5 X8 ?8 g4 u4 }& \
access-list acl_inside extended deny udp any any eq 14347 ^: G3 p1 [/ c* ~% s
access-list acl_inside extended deny tcp any any eq 593
( @1 m- {1 t4 ^$ s: l5 ]( aaccess-list acl_inside extended deny udp any any eq 593
+ M- D& t+ i* |+ f+ O) R/ I0 Baccess-list acl_inside extended deny udp any any eq tftp. [0 j5 {3 m8 J3 N z- B7 w
access-list acl_inside extended permit icmp any any* _4 ~) p; ^8 u# W% H: l+ _: t
access-list acl_inside extended permit icmp any any traceroute
" x2 [& R/ X6 o5 D) Qpager lines 24
m$ G5 j; z5 R* ulogging enable) ~# J8 c5 l3 U0 V2 j$ Z6 J0 l
logging buffer-size 1000000( r; X; l6 o7 e+ q1 ]9 G! ^
mtu outside 15005 e5 z$ H/ | I; S- e$ X: J
mtu inside 1500, I( T X4 }8 `$ _
no failover% G. T# k% m5 H4 Y2 T
icmp permit any outside) }1 l# v* d* A, V6 @* @$ T( v
icmp permit any traceroute outside
6 P( s+ g8 J, p0 K! L5 i$ g) U `icmp permit any echo outside
/ c8 r5 i3 N' {icmp permit any echo-reply outside
5 ^7 N! P* Z% K8 ~# Oicmp permit any inside
1 P( M- T4 P( i E2 qicmp permit any traceroute inside
* ~; m- {: |' a: H- ^: A2 R: ^icmp permit any echo-reply inside
) H) S+ w) b# Qicmp permit any echo inside4 I1 W" V0 y! E& S& W6 O3 ~5 ~
no asdm history enable
q: l! a+ B* s5 t& n- darp timeout 14400, B; O' n4 s# x7 K
nat-control
# ] O0 ]$ e* N* S: |0 s c) Nglobal (outside) 2 202.102.75.170
" m5 `1 Z: B T9 I z1 I! Wnat (inside) 2 10.0.0.0 255.0.0.0
9 X7 i( g* Y' r) a+ f" Jaccess-group acl_outside in interface outside5 ~) ^, q1 M V9 g5 I
access-group acl_inside in interface inside, Q+ W7 G2 f: \ D; ~
route outside 0.0.0.0 0.0.0.0 10.101.253.5 1
4 ^" E4 w( N- s' Uroute inside 10.0.0.0 255.0.0.0 10.100.253.129 17 h8 H/ J" }8 z; ?9 u
timeout xlate 3:00:00
& R' d% Y. R D! G! @' qtimeout conn 1:00:00 half-closed 0:10:00 udp 0:02:00 icmp 0:00:02
1 J! `( p8 t' Z H! Ftimeout sunrpc 0:10:00 h323 0:05:00 h225 1:00:00 mgcp 0:05:00
2 {5 d& n) r! ]3 t$ M* qtimeout mgcp-pat 0:05:00 sip 0:30:00 sip_media 0:02:00
, T, ^" y6 L. C. T; A1 |timeout uauth 0:05:00 absolute
: l: |, E9 _+ H6 I% Kusername cisco password sUUP6Aqj3hVuBbgY encrypted
( Y) _9 m7 i% ]$ ~4 [- u8 }snmp-server host inside 192.168.1.98 community **8ppting$ W' E7 f% A3 Q1 P3 \
no snmp-server location* N, L. e" ^% G$ U
no snmp-server contact. ]5 ~- v I6 k
snmp-server community **8ppting
: x6 N# Z3 v* ]0 @ B5 |snmp-server enable traps snmp authentication linkup linkdown coldstart1 K% Y L& G" B! X; i0 ~
snmp-server enable traps syslog
2 K1 ~, M- D5 ncrypto ipsec security-association lifetime seconds 28800
4 Q6 J4 ?( r: D5 h. c/ p" wcrypto ipsec security-association lifetime kilobytes 4608000
0 x/ M5 K) ]: f; stelnet 10.100.253.0 255.255.255.0 inside5 E% B, l$ y0 j4 K+ U$ d3 {
telnet 10.100.254.0 255.255.255.0 inside: U5 B9 P* g+ P) a2 [
telnet 192.168.1.0 255.255.255.0 inside _$ g8 l) ?( }, H& z
telnet timeout 5, M$ J; ^& K0 I" `
ssh timeout 54 i9 Q1 ?6 y9 p9 G1 t
console timeout 0; |1 ~5 A" k- u9 p$ K
!
3 s) }6 c3 u1 W& g, [; p. Cclass-map inspection_default) Y8 W* Y" a' }" R
match default-inspection-traffic
; e2 ]: p' { r$ K( X% \% v% W [9 Y!8 o2 s3 e2 R$ a+ i* k# B
!* T" F, E2 ^1 R
policy-map global_policy
3 q! V. @. h+ y0 {8 t) Kclass inspection_default; K( T% v! b, {
inspect dns maximum-length 512/ J8 z+ n. m( I
inspect ftp
6 ~9 V# Q/ _( a: Q% r* ] inspect h323 h2250 W. i, j) w9 |6 Y. X& ]
inspect h323 ras1 R/ Y e4 C/ l0 ~
inspect netbios
# I$ A+ D' x' {) w+ L$ q w, p inspect rsh8 Z( k5 R* L0 t' n, G& k
inspect tftp
$ R! t' a9 D% |3 M9 K V) o inspect sip# o; n Q5 ?% @! z c7 L+ P; X
inspect xdmcp
3 q% ], @4 ?. f" Y* v+ L inspect icmp
+ @+ Q6 g2 `# S+ {4 ]7 d inspect sunrpc2 B% Z" s: ]0 s5 y7 ?. n- E' Y& k
!
$ b1 P9 B/ \, a& [9 t( A' E r2 d. Qservice-policy global_policy global/ N6 p2 A# J4 P7 u, s# v
Cryptochecksum:1cea5835e514d3bf95b2f27b3c9a4163+ O7 N: J" e) C. P Q) Y3 p
: end |
|
所有IT类厂商认证考试题库下载
【新盟教育】2023最新华为HCIA全套视频合集【网工基础全覆盖】---国sir公开课合集
【新盟教育】网工小白必看的！2023最新版华为认证HCIA Datacom零基础全套实战课
原创_超融合自动化运维工具cvTools
重量级~~30多套JAVA就业班全套 视频教程（请尽快下载，链接失效后不补）
链接已失效【超过几百G】EVE 国内和国外镜像 全有了 百度群分享
某linux大佬，积累多年的电子书(约300本)
乾颐堂现任明教教主Python完整版
乾颐堂 教主技术进化论 2018-2019年 最新31-50期合集视频（各种最新技术杂谈视频）
Python学习视频 0起点视频 入门到项目实战篇 Python3.5.2视频教程 共847集 能学102天
约21套Python视频合集 核心基础视频教程（共310G,已压缩）
最新20180811录制 IT爱好者-清风羽毛 - 网络安全IPSec VPN实验指南视频教程
最新20180807录制EVE开机自启动虚拟路由器并桥接物理网卡充当思科路由器
[复制链接]
