
1.网络拓扑如下图
5 j3 t) w9 i# y* {1 T" h. f' E, m/ n! {9 G
2.CISCO pix515e使用PDM3.0配置如下
7 d7 i' @6 H7 D) q+ B4 C# j
+ U& z" C# I$ J& m2 c9 t1 X, l5 m; f& o% U: G" o& t( z0 s! T, m% S% |
" G3 Z7 k4 Y) Y. y+ O5 \
* Y; u- n! ~& m* k D
6 w: a8 ?: Y- o; I8 N/ |
( ^' Q/ f" B0 l2 U1 u9 X% i- w; ]8 i& f
3.拟实现的网络功能:公网计算机通过光纤、ADSL、WIFI、mobile等方式接入因特网,再通过windows自带的虚拟专用网拨号连接或者CISCO的VPN cilent拨入PIX515e内部的VpnServer,以实现接入VpnServer所在的局域网,共享局域网内的资源,VPN Server在内网测试通过。
* K6 R7 B' V" U- n+ z. o3 c
% u- `0 S5 m8 K c- r& r4.遇到的问题:公网计算机无法通过pix515e的公网地址向内穿越NAT拨入VPNserver。能否在pix515e上建立一条Vpn Tunnel以实现第3条的网络功能,该如何建立。
- K% z2 e3 p: Q: |) T0 W0 x# I
9 u; u9 }6 i8 a" d5.已失败的方法+ D% M2 n+ y& j* b4 T
4 [- Z7 d8 M$ Y+ Z
A:端口映射,该思科设备通过NAT功能将内网IP转换为公网IP,不是路由器,无法做端口映射。
0 s- u/ u4 P6 @% b& k- C
1 j; i8 {! n2 N: F3 ^B:在PDM3.0上尝试对PIX515e进行VPN的设置,未能凑效。" }% x8 a! m! c) E( @# t/ [
' h% |) A/ ?5 cC:逆向NAT失败,PDM3.0不允许。
, [+ u m0 w8 a- ^( V9 b
" W' ]9 b$ r+ u设备目前的配置列表
9 q( i. ]5 E! {/ O
! ^- j, {7 i$ _Building configuration...
+ P- [" n4 p( K0 `% }1 H6 x: Saved
8 h- ?# }% ?3 e6 ^:0 s0 l, m* _" Y7 q' j
PIX Version 6.3(3)
. @; G# h' h% w3 u6 V# E7 c. \interface ethernet0 auto
$ w$ {) X) K1 h# d3 z v: E2 Z; Iinterface ethernet1 auto
I8 i, P# Q/ @) Znameif ethernet0 outside security0* m" l2 Q: x3 N7 ?1 B) N
nameif ethernet1 inside security100
8 a6 {# f4 L8 Z; H. D5 j* tenable password /NNcO2U/e4a3IAX3 encrypted' I+ x r) S. q' j6 ^ [8 ?7 r
passwd 2KFQnbNIdI.2KYOU encrypted
$ c6 t3 ?$ F9 f, @hostname huawei M2 b" j/ O6 [- D Z6 u9 ^+ J3 d# g
domain-name huawei.com
0 _! E/ d3 C) x* |6 afixup protocol dns maximum-length 512% M. F# \& T4 q+ q+ p3 N" S/ L
fixup protocol ftp 21# |) p. W" X$ a
fixup protocol h323 h225 1720
- E- ~( j- V5 s8 s& ofixup protocol h323 ras 1718-1719* J# T/ r, j9 M( {& T) L- k' T! W
fixup protocol http 80$ h) t- u* J ~: O* }
fixup protocol rsh 514# z' m5 | ]. R
fixup protocol rtsp 5540 Q/ N8 t8 ~" P6 ^9 ]! [0 G3 d
fixup protocol sip 5060
0 r$ |5 s( Y3 }. F- {% |4 b$ \# zfixup protocol sip udp 5060
) b# z' P, W# h: a; S4 u$ Q, ffixup protocol skinny 2000
. k8 H8 h1 C1 z, X6 {6 r6 {- j+ cfixup protocol smtp 25
a1 D. H# K M" ^1 ofixup protocol sqlnet 1521+ n" G- W- q( G8 v- o
fixup protocol tftp 69
) N' I% U& q& fnames
% r4 w8 i2 Q! Z D" laccess-list outside_inbound_nat0_acl permit ip interface outside 192.168.0.0 255.255.255.0
( {: d+ Z# }5 Y$ q8 y; b: |. _* n1 Dpager lines 24
. m2 h5 ?4 ]: A: x3 Z3 g/ `" gmtu outside 1500
" b1 D2 f5 Y( O) \mtu inside 15003 Z2 v3 n3 g3 W% f) r/ b% \6 f
ip address outside 221.XXX.138.250 255.255.255.2524 h4 z- C% a5 U/ Y
ip address inside 192.168.0.254 255.255.255.07 |0 { I0 ]8 o4 F+ v, j' u
ip audit info action alarm
% B, I) L7 C( X$ e) m- bip audit attack action alarm( d1 Z- ]" B( O
pdm location 192.168.0.3 255.255.255.255 inside
q; F6 A" A) t6 m& _pdm location 192.168.0.24 255.255.255.255 inside
" }* q1 B' r* Kpdm location 192.168.0.1 255.255.255.255 inside
8 w2 l6 g( ^ X* L# l- xpdm location 192.168.0.2 255.255.255.255 inside
% t& g$ u* s; s$ E$ Updm location 192.168.0.12 255.255.255.255 inside b8 X/ @# n, A" M1 H B
pdm location 192.168.0.10 255.255.255.255 inside
* b# I* {, Q. | xpdm location 192.168.0.16 255.255.255.255 inside! X" [! p: z2 U7 {
pdm location 192.168.0.19 255.255.255.255 inside
1 V4 [* |/ I U* Fpdm location 192.168.0.20 255.255.255.255 inside
0 k/ b1 L: q# p2 n" C$ J h. Ipdm location 192.168.0.22 255.255.255.255 inside2 d! }* U1 K' q# S8 f8 Y
pdm location 192.168.0.23 255.255.255.255 inside7 r- N2 Z6 u4 C. J8 l* S# L
pdm location 192.168.0.34 255.255.255.255 inside h8 t {1 w' O; P7 x% \8 S
pdm location 192.168.0.38 255.255.255.255 inside
8 {" g* F( c ?- V* J9 E: V6 cpdm location 192.168.0.40 255.255.255.255 inside, t& h: n# x8 w1 l
pdm location 192.168.0.58 255.255.255.255 inside
, B; P/ Z. v5 C1 q- D8 Updm location 192.168.0.17 255.255.255.255 inside
- w r2 { Y5 D+ D! G# T3 apdm location 192.168.0.39 255.255.255.255 inside/ S- Y+ g) d% [. @
pdm location 192.168.0.41 255.255.255.255 inside/ T' O7 M# f, Q: U; f
pdm location 192.168.0.13 255.255.255.255 inside
- P+ {6 [3 P0 I' Q, ^ M- kpdm location 192.168.0.42 255.255.255.255 inside
* P9 g. C- k4 T# t' [- opdm location 192.168.0.45 255.255.255.255 inside) G E8 e0 U3 u) F* K
pdm location 192.168.0.46 255.255.255.255 inside
; u3 q- f0 _2 S: S6 Z" Xpdm location 192.168.0.47 255.255.255.255 inside
8 A* i7 b# D; ppdm location 192.168.0.50 255.255.255.255 inside) Z1 D8 e. ?$ F- Q3 \$ I
pdm location 192.168.0.25 255.255.255.255 inside
3 T# z0 {8 O- Zpdm location 192.168.0.4 255.255.255.255 inside
& Q. K4 }+ {1 k) f9 I% ]1 vpdm location 192.168.0.6 255.255.255.255 inside0 p/ c/ c8 Z3 q* [1 H( \
pdm location 192.168.0.35 255.255.255.255 inside* Z* g" M; _6 c1 {+ s' L3 J
pdm location 192.168.0.21 255.255.255.255 inside
( F: C. | k( ^$ c' hpdm location 192.168.0.200 255.255.255.255 inside+ _ M) _3 _7 f* o
pdm location 192.168.0.48 255.255.255.255 inside" o. J7 Y; x" x: G
pdm location 192.168.0.60 255.255.255.255 inside
# R2 W: i- J/ I* W8 r: |( xpdm location 192.168.0.51 255.255.255.255 inside
8 n, F* O, H: D3 Y! wpdm location 192.168.0.32 255.255.255.255 inside# O9 P3 L; k) @% W
pdm location 192.168.0.18 255.255.255.255 inside! d4 X( ~/ r3 z$ _
pdm location 192.168.0.7 255.255.255.255 inside
! J. F3 [) T7 k9 Updm location 192.168.0.201 255.255.255.255 inside
5 |( o5 J. N# A; y/ z2 q& t9 bpdm location 192.168.0.36 255.255.255.255 inside
6 {( G) o7 N @! i* n% F, G7 Mpdm location 192.168.0.100 255.255.255.255 inside
7 x+ s+ `7 D+ Dpdm location 192.168.0.5 255.255.255.255 inside
9 U$ }9 V& v! L. U$ Qpdm location 192.168.0.202 255.255.255.255 inside4 L3 t7 F6 P% _4 t
pdm location 192.168.0.26 255.255.255.255 inside8 ]# e% r' D, k1 U8 S: D6 v& P m
pdm location 192.168.0.203 255.255.255.255 inside) P/ B, a' ^2 L7 c; p) t
pdm location 192.168.0.14 255.255.255.255 inside
" w" t! K6 q- X8 _5 @: ^pdm location 192.168.0.204 255.255.255.255 inside9 c3 j; K% J5 k
pdm location 192.168.0.251 255.255.255.255 inside
* c& R$ J* }$ q- K; t. T2 ipdm location 192.168.0.205 255.255.255.255 inside2 ?. N: R; G' c
pdm location 192.168.0.206 255.255.255.255 inside
7 F/ l" x( J2 ]$ D7 Npdm location 192.168.0.207 255.255.255.255 inside& G" o) n, j- s$ T9 N: r3 ^3 W
pdm location 192.168.0.208 255.255.255.255 inside. @/ Y' }% @: v1 E; v
pdm location 192.168.0.209 255.255.255.255 inside/ x: c2 k5 T- g* q' l0 D
pdm location 192.168.0.108 255.255.255.255 inside3 Y1 i' r% N* Y( f/ |" K" m4 l& J
pdm location 192.168.0.31 255.255.255.255 inside6 M, T p- N* L$ G6 S
pdm location 192.168.0.30 255.255.255.255 inside
0 Y, z( O+ e u, y* k9 opdm location 192.168.0.210 255.255.255.255 inside6 k" I2 [/ @( D+ w) P7 T
pdm location 192.168.0.8 255.255.255.255 inside
& u5 ^5 W, B' _7 g9 g. @# ipdm location 192.168.0.11 255.255.255.255 inside
: v4 ], I+ l9 G: i7 M% ^pdm location 192.168.0.29 255.255.255.255 inside/ `" `% F7 e' P! q
pdm location 192.168.0.109 255.255.255.255 inside
. i0 ]4 Z4 `/ O) D0 _# spdm location 192.168.0.111 255.255.255.255 inside
/ |. \7 J6 i, a7 k+ K/ Ppdm location 192.168.0.116 255.255.255.255 inside' \7 n) b7 u& z# D% r, z" U& n) |1 k
pdm location 192.168.0.113 255.255.255.255 inside9 J! K# ?8 |! T' v6 p5 ?
pdm location 192.168.0.107 255.255.255.255 inside
( i+ g# t! {" ^pdm location 192.168.0.240 255.255.255.255 inside
' J8 m0 L& G& `pdm location 192.168.0.241 255.255.255.255 inside+ i+ \* y9 s! [; t( p# }
pdm location 192.168.0.233 255.255.255.255 inside0 z z( g3 @7 l! ~% o# Q. D
pdm location 192.168.0.250 255.255.255.255 inside6 t8 P* _9 m% ]6 M1 A
pdm location 192.168.0.252 255.255.255.255 inside, b) D. o% Y/ b! o4 u
pdm location 192.168.0.253 255.255.255.255 inside
4 A! W, e1 B$ i4 I; `pdm location 192.168.0.44 255.255.255.255 inside
; `5 J& R/ H6 C: l: P Rpdm location 192.168.0.242 255.255.255.255 inside2 k0 l' {8 U7 ?
pdm location 192.168.0.239 255.255.255.255 inside# x6 h7 B5 U& c& `/ c M, E- i, Z
pdm location 192.168.0.27 255.255.255.255 inside
$ {' D2 {4 o' {& T( P+ ]9 jpdm location 192.168.0.249 255.255.255.255 inside& ^$ o1 l d( @ u7 @
pdm location 192.168.0.61 255.255.255.255 inside
9 I; F: n5 {# U6 ~7 u+ c' G- ^pdm location 192.168.0.62 255.255.255.255 inside
. u) j; E# J) A3 X9 K6 k [/ m- hpdm location 192.168.0.63 255.255.255.255 inside
! B% b. ]8 L8 D9 Y5 z: cpdm location 192.168.0.64 255.255.255.255 inside
3 P/ y5 @1 p9 p0 ]pdm location 192.168.0.68 255.255.255.255 inside
- @# d. H. o# x- {3 `- _0 epdm location 192.168.0.211 255.255.255.255 inside- V2 E/ c) {# e* z& g0 i |
pdm location 192.168.0.70 255.255.255.255 inside& X+ y) k% S/ [" d3 M/ @
pdm location 192.168.0.65 255.255.255.255 inside0 m* K" G9 q9 a* c j
pdm location 192.168.0.121 255.255.255.255 inside
1 j9 D1 D! m: i2 N+ Dpdm location 192.168.0.247 255.255.255.255 inside' _6 A) Y2 p) u! D4 x
pdm location 192.168.0.37 255.255.255.255 inside
- J0 Z# x0 T' H% s2 h# l9 Kpdm location 192.168.0.73 255.255.255.255 inside
* A9 Z3 J2 ~3 ?/ u9 I1 u- Kpdm location 192.168.0.112 255.255.255.255 inside
! o: l5 I2 L) S9 g# fpdm location 192.168.0.57 255.255.255.255 inside8 Q5 {0 V. I! K& f
pdm location 192.168.0.99 255.255.255.255 inside
6 a! Z& x$ E; N' t9 {" I* x9 {; mpdm location 192.168.0.124 255.255.255.255 inside9 H1 q8 M2 h9 Y
pdm location 192.168.0.52 255.255.255.255 inside1 L+ _. R, C- w) a/ i3 V/ p
pdm location 192.168.0.118 255.255.255.255 inside
% \" M0 i$ F [* O2 h) wpdm location 192.168.0.122 255.255.255.255 inside, ]2 N4 A' z8 h3 ?
pdm location 192.168.0.49 255.255.255.255 inside5 D! P( L# @/ g0 f1 [0 `
pdm location 192.168.0.55 255.255.255.255 inside
1 y$ ^) _9 M$ G( q7 ?! p: opdm location 192.168.0.43 255.255.255.255 inside
/ H' E3 L9 T6 C6 v- d) zpdm location 192.168.0.103 255.255.255.255 inside+ s( O; _/ m; z# }! B* U4 C
pdm location 192.168.0.54 255.255.255.255 inside9 q, }5 y; @3 V" M
pdm location 192.168.0.243 255.255.255.255 inside
8 M4 J$ }8 P' Z& P* |pdm location 192.168.0.244 255.255.255.255 inside
+ a/ R( `! A, y! d+ G6 vpdm location 192.168.0.230 255.255.255.255 inside( E. R A+ C7 d
pdm location 192.168.0.135 255.255.255.255 inside
8 |0 m3 F% i0 K, V# Lpdm location 192.168.0.115 255.255.255.255 inside. ]% \3 s7 |% P& z! O- t
pdm location 192.168.0.245 255.255.255.255 inside* c. @7 C/ v' ^ o' K( J) q) t
pdm location 192.168.0.238 255.255.255.255 inside
* n" l/ f0 o8 u3 O6 e6 @pdm location 192.168.0.237 255.255.255.255 inside! z; s$ m3 t/ ~- u0 [3 @9 h
pdm location 192.168.0.231 255.255.255.255 inside
) |: l3 J& e1 `3 R8 \) t& y; j9 Y2 Jpdm location 192.168.0.235 255.255.255.255 inside
B$ _! U8 k4 ?; y9 H, V9 n! t) w @pdm location 192.168.0.236 255.255.255.255 inside0 h% |2 W4 y5 [7 X. I& T- p/ i
pdm location 192.168.0.190 255.255.255.255 inside, q/ w( x' ^7 W# Y" V/ u# B; c2 \
pdm location 192.168.0.181 255.255.255.255 inside
2 @2 Z c% v* spdm location 192.168.0.9 255.255.255.255 inside
2 H0 y7 b" S/ o. R; B5 z2 Gpdm location 192.168.0.246 255.255.255.255 inside
2 n- n6 o9 S7 A+ r: f. B! ppdm location 192.168.0.59 255.255.255.255 inside& }' i6 z7 w& T0 }) {8 f# f( }
pdm location 192.168.0.191 255.255.255.255 inside# y5 i# C2 Y+ R/ r) f
pdm location 192.168.0.117 255.255.255.255 inside6 t$ N4 c; S, ~3 {0 K
pdm location 192.168.0.171 255.255.255.255 inside
1 j/ X+ F! l& i e6 spdm location 192.168.0.53 255.255.255.255 inside7 F# Y# _( X8 s% U: C7 f/ Q( f9 w
pdm location 192.168.0.130 255.255.255.255 inside
' o; ?$ Q+ r: d' f, Jpdm location 192.168.0.91 255.255.255.255 inside; o @3 W0 X3 p. x, X' x
pdm location 192.168.0.140 255.255.255.255 inside$ k/ z3 h9 ^) T( F% _* a; D
pdm location 192.168.0.220 255.255.255.255 inside
# r" P* k# k( b4 `) I' Y! _pdm location 192.168.0.119 255.255.255.255 inside- {; C8 C% _: U& _: M& b! F
pdm location 192.168.0.223 255.255.255.255 inside
+ @1 ]7 [" U6 k+ Vpdm location 192.168.0.106 255.255.255.255 inside3 s- n; I* G; C/ S% |0 u" ~1 h4 _
pdm location 192.168.0.123 255.255.255.255 inside! s- k8 z" t8 |
pdm location 192.168.0.67 255.255.255.255 inside
- G) m! F4 \! I9 ^; D# Z( N$ @7 fpdm location 192.168.0.219 255.255.255.255 inside7 I3 g; _4 A9 @% p/ N
pdm location 192.168.0.56 255.255.255.255 inside2 t7 C, d1 x, g5 X! r0 t o, N* m" \
pdm location 192.168.0.66 255.255.255.255 inside
% ?8 [; u1 a' o" K. D! Wpdm location 192.168.0.76 255.255.255.255 inside
- a5 @/ T8 B$ U2 Ypdm location 192.168.0.102 255.255.255.255 inside4 w# X( z" U9 z7 D b3 ~2 K6 T* e
pdm location 192.168.0.170 255.255.255.255 inside+ K+ j2 N3 a% T' j/ V
pdm location 192.168.0.172 255.255.255.255 inside! r; L+ S7 \8 F: b! i) [
pdm location 192.168.0.173 255.255.255.255 inside$ F* O7 V7 y/ M6 A1 e
pdm location 192.168.0.174 255.255.255.255 inside
% W0 `3 q- n$ g+ {$ @' wpdm location 192.168.0.175 255.255.255.255 inside
& t; y" f, z, r3 F+ I1 K" `$ ^pdm location 192.168.0.160 255.255.255.255 inside
) J# @% a8 [4 T2 n" o1 {5 spdm location 192.168.0.138 255.255.255.255 inside M+ r2 ?# e" k+ U! _$ F' @. }. W: M
pdm location 192.168.0.78 255.255.255.255 inside2 |; i+ z" ?4 I( b+ y3 t9 A: O
pdm location 192.168.0.69 255.255.255.255 inside
5 H. P- z: m* mpdm location 192.168.0.221 255.255.255.255 inside, ]* g: E0 Z. S8 G9 B$ `
pdm location 192.168.0.110 255.255.255.255 inside; G3 [9 A, H9 |8 z9 ^
pdm location 192.168.0.232 255.255.255.255 inside0 j b& {0 H* ]9 J/ K
pdm location 192.168.0.80 255.255.255.255 inside
* A" ~; n' a, a0 C; ypdm location 192.168.0.81 255.255.255.255 inside
F$ }, m' T. C6 \) s7 ^. Npdm location 192.168.0.82 255.255.255.255 inside$ O1 B. E8 `7 A5 M3 @, j
pdm location 192.168.0.83 255.255.255.255 inside n4 S1 C+ Z5 }. b# i W) N m( M
pdm location 192.168.0.84 255.255.255.255 inside2 c: R6 ~/ n9 `4 t+ I+ W: r$ H
pdm location 192.168.0.85 255.255.255.255 inside
, M U6 G: a& w) gpdm location 192.168.0.86 255.255.255.255 inside
6 }3 A1 x" q0 L) T5 a: c7 Xpdm location 192.168.0.87 255.255.255.255 inside P! x, H/ K8 F! ^
pdm location 192.168.0.88 255.255.255.255 inside: ~7 K$ w$ l# R/ B) R/ R
pdm location 192.168.0.89 255.255.255.255 inside
' b6 u) |5 H. c0 Fpdm location 192.168.0.90 255.255.255.255 inside
4 R' d% ~4 f. d4 `/ npdm location 192.168.0.28 255.255.255.255 inside
: V2 s' c. y9 p# c% _& Spdm location 192.168.0.234 255.255.255.255 inside; z6 r- [8 Q# q6 j2 I! Y
pdm location 192.168.0.222 255.255.255.255 inside. c3 I* I7 V* R1 l
pdm location 192.168.0.150 255.255.255.255 inside6 X4 s# ~0 g5 a9 \
pdm location 192.168.0.151 255.255.255.255 inside
; r; n: t4 s: k3 R- S0 _pdm location 192.168.0.152 255.255.255.255 inside
! ?7 z, E/ g" Q( Qpdm location 192.168.0.77 255.255.255.255 inside
2 e& M( m4 s# ?& c$ p- r: Z* dpdm location 192.168.0.72 255.255.255.255 inside
# w+ s$ |; X' ~8 d' N; S! epdm location 192.168.0.225 255.255.255.255 inside, c3 F$ K6 f& d$ j; ?# N4 X! Q0 V
pdm location 192.168.0.161 255.255.255.255 inside5 G" M# W2 I$ {, B8 M% q
pdm location 192.168.0.92 255.255.255.255 inside( f( p @, U5 M0 t
pdm location 192.168.0.192 255.255.255.255 inside: u) o6 J$ Y; w; y
pdm location 192.168.0.193 255.255.255.255 inside) ?6 t2 v- k: F# w) w6 m% _
pdm location 192.168.0.15 255.255.255.255 inside) q- T- e& x% X5 p
pdm location 192.168.0.33 255.255.255.255 inside
: F" T. n5 k1 W7 K7 k& {) T9 P. tpdm location 192.168.0.79 255.255.255.255 inside
( Y: J+ M2 P) e; b5 S9 Jpdm location 192.168.0.93 255.255.255.255 inside8 G! Q4 |4 G8 L# V2 C, Q: ]
pdm location 192.168.0.94 255.255.255.255 inside5 r) F3 `$ ?/ _5 [- Y
pdm location 192.168.0.95 255.255.255.255 inside
1 M+ I8 e9 n$ u. o& N- d7 E! p! t0 Xpdm location 192.168.0.96 255.255.255.255 inside
+ x' s R' D3 V1 M& I2 Dpdm location 192.168.0.97 255.255.255.255 inside
" E- h5 w; d$ | k$ Dpdm location 192.168.0.98 255.255.255.255 inside
4 `2 U/ b4 V% G) J- Updm location 192.168.0.101 255.255.255.255 inside* k1 ^/ d1 Q3 U+ } m3 h- `( d
pdm location 192.168.0.104 255.255.255.255 inside
- |- i# ?6 x& lpdm location 221.XXX.138.250 255.255.255.255 inside
# K: D* s; U* F/ [# r ?pdm location 192.168.0.71 255.255.255.255 inside
3 {$ c; i; [9 L# N& C$ U, Q. v( updm location 192.168.0.185 255.255.255.255 inside
|& X5 D7 D, w# _- N5 S# m5 O# tpdm location 192.168.0.75 255.255.255.255 inside
, W2 ?2 V/ s" H1 t5 xpdm location 192.168.0.120 255.255.255.255 inside! w/ |' A9 l, K; q9 J% h
pdm location 192.168.0.212 255.255.255.255 inside U7 _; ] }! \" ]
pdm location 192.168.0.213 255.255.255.255 inside
% ` A. x9 x+ P+ m7 y- t* y& ]pdm location 192.168.0.214 255.255.255.255 inside/ v1 v4 \; `2 K, @7 K
pdm location 192.168.0.215 255.255.255.255 inside: R/ s% v4 `: V) G% j
pdm location 192.168.0.128 255.255.255.192 outside' q* o/ Z' m/ V1 D9 n9 w5 L
pdm history enable, U9 f- N. E2 T7 j# q/ e
arp timeout 14400
3 s% X3 Z# r( e6 Rglobal (outside) 10 interface
5 B5 e5 j5 |/ L( A# ~nat (outside) 0 access-list outside_inbound_nat0_acl outside) d" P5 }. s2 p2 t' S
nat (inside) 10 192.168.0.1 255.255.255.255 0 0% f2 ^2 f# X0 | Z
nat (inside) 10 192.168.0.3 255.255.255.255 0 0
+ P7 C6 z& Z% ^% g7 L( @9 lnat (inside) 10 192.168.0.4 255.255.255.255 0 0
: P8 ^9 K2 p: V: m7 C1 E- g1 \nat (inside) 10 192.168.0.5 255.255.255.255 0 0- X0 J3 k7 m4 K
nat (inside) 10 192.168.0.10 255.255.255.255 0 0
/ p2 z H9 B7 _ B- O# hnat (inside) 10 192.168.0.11 255.255.255.255 0 0, l: c) j0 u. z: L+ d; `- {1 a. i
nat (inside) 10 192.168.0.12 255.255.255.255 0 0
+ N: |- p6 P( i) ^' t: ~# Anat (inside) 10 192.168.0.13 255.255.255.255 0 00 p/ a g6 q, a e
nat (inside) 10 192.168.0.14 255.255.255.255 0 0) K# J* j* `" j& D2 S
nat (inside) 10 192.168.0.15 255.255.255.255 0 0. b! q* W% f3 E# O& V
nat (inside) 10 192.168.0.16 255.255.255.255 0 0' t; c- r- d4 R* U* g* N9 V
nat (inside) 10 192.168.0.17 255.255.255.255 0 09 e- ^$ _8 r" W5 z0 h
nat (inside) 10 192.168.0.21 255.255.255.255 0 0
) c1 q( G6 s( U2 k( [nat (inside) 10 192.168.0.22 255.255.255.255 0 0
8 [. @) _6 S& h8 ^ L% v5 t5 Snat (inside) 10 192.168.0.23 255.255.255.255 0 00 H" n1 r, h& e
nat (inside) 10 192.168.0.24 255.255.255.255 0 0
6 l- }9 M, z7 L# l& knat (inside) 10 192.168.0.25 255.255.255.255 0 03 F9 C! z$ _) C, f. r: w
nat (inside) 10 192.168.0.26 255.255.255.255 0 0& j' d% I! a3 r3 @
nat (inside) 10 192.168.0.27 255.255.255.255 0 0( k# B& x/ Q1 U& \" i. I* @0 k) M
nat (inside) 10 192.168.0.29 255.255.255.255 0 0 p+ ?7 j" ~ a' Y
nat (inside) 10 192.168.0.31 255.255.255.255 0 0$ e E3 j0 u2 q% W3 g' U% b4 C+ q# H
nat (inside) 10 192.168.0.32 255.255.255.255 0 0
' F2 o: \8 T% n8 w2 h$ nnat (inside) 10 192.168.0.33 255.255.255.255 0 0/ w0 ^9 T5 W- X8 [# O- ?
nat (inside) 10 192.168.0.34 255.255.255.255 0 0
+ g- r0 t0 _' d. \! Y+ b$ b4 D+ inat (inside) 10 192.168.0.37 255.255.255.255 0 0" U; X) y) B9 u% b6 }( @& m
nat (inside) 10 192.168.0.39 255.255.255.255 0 0. d/ k+ l: M2 P; F% I5 b
nat (inside) 10 192.168.0.40 255.255.255.255 0 03 Z }7 {* _* H0 H1 B
nat (inside) 10 192.168.0.44 255.255.255.255 0 0$ r/ D" a* c# h( H
nat (inside) 10 192.168.0.45 255.255.255.255 0 05 Z2 U/ v- o/ Q( G' C3 v
nat (inside) 10 192.168.0.47 255.255.255.255 0 0
1 s9 T( Z- Q4 {; dnat (inside) 10 192.168.0.48 255.255.255.255 0 0+ [7 ~/ Y2 W% @; E
nat (inside) 10 192.168.0.49 255.255.255.255 0 01 g, f! H/ O+ s
nat (inside) 10 192.168.0.50 255.255.255.255 0 0
! b8 N6 B1 E7 h& w4 E" Dnat (inside) 10 192.168.0.51 255.255.255.255 0 0
1 E4 [4 h1 x$ J$ e6 u. P6 U* L) Znat (inside) 10 192.168.0.52 255.255.255.255 0 0
3 v& J5 [9 g; t: inat (inside) 10 192.168.0.53 255.255.255.255 0 0# H* F4 ~# w! ]4 g+ S4 l& [
nat (inside) 10 192.168.0.54 255.255.255.255 0 0
: s Y$ q* q z' {5 h9 Bnat (inside) 10 192.168.0.55 255.255.255.255 0 05 [2 ]: K% X( ?. v' Z
nat (inside) 10 192.168.0.56 255.255.255.255 0 0
! L! v0 B+ Y8 vnat (inside) 10 192.168.0.57 255.255.255.255 0 0+ W0 V: T1 k8 d7 S* U/ |( N8 i
nat (inside) 10 192.168.0.58 255.255.255.255 0 0- G' _, F2 ~8 Q
nat (inside) 10 192.168.0.59 255.255.255.255 0 0
" h8 c( L1 E/ i. r/ Mnat (inside) 10 192.168.0.62 255.255.255.255 0 0, n7 ?% _2 J+ D5 X
nat (inside) 10 192.168.0.63 255.255.255.255 0 05 D1 U& m. [+ t
nat (inside) 10 192.168.0.64 255.255.255.255 0 0, s! H8 O" r* ?
nat (inside) 10 192.168.0.65 255.255.255.255 0 0
0 }- o0 R/ c- {' [7 w. qnat (inside) 10 192.168.0.66 255.255.255.255 0 0
1 \% p1 `; c" X! M' W/ unat (inside) 10 192.168.0.67 255.255.255.255 0 0% y7 o p5 N% n0 Z: h
nat (inside) 10 192.168.0.68 255.255.255.255 0 0
# o, h1 k7 U' P* i; Lnat (inside) 10 192.168.0.69 255.255.255.255 0 04 m" y1 f6 {2 i& `
nat (inside) 10 192.168.0.71 255.255.255.255 0 0
- ]5 v$ [. s- D1 I7 O8 Vnat (inside) 10 192.168.0.73 255.255.255.255 0 0
; x; t3 C+ m* B1 ?- s( ?$ rnat (inside) 10 192.168.0.76 255.255.255.255 0 06 ~9 a: a/ t O. f& E! M% X' X
nat (inside) 10 192.168.0.79 255.255.255.255 0 0 D) F# g* ]* E4 Z* f5 u0 j
nat (inside) 10 192.168.0.80 255.255.255.255 0 0
8 o+ @+ n, p: ~nat (inside) 10 192.168.0.81 255.255.255.255 0 0
9 O+ y: Q, Q# b; X& R' Q; p+ n: qnat (inside) 10 192.168.0.82 255.255.255.255 0 0
; w: B: J6 |6 g2 h' D9 B7 @nat (inside) 10 192.168.0.83 255.255.255.255 0 0
5 w/ D$ F5 j* |0 Lnat (inside) 10 192.168.0.85 255.255.255.255 0 0
1 j1 H2 c* M$ \% Z( n' p* {% nnat (inside) 10 192.168.0.86 255.255.255.255 0 02 t% U) n' B* l( C+ ]" w' o
nat (inside) 10 192.168.0.87 255.255.255.255 0 00 u" e7 {. ?) t* }+ D, b/ l
nat (inside) 10 192.168.0.89 255.255.255.255 0 0
1 ]7 J( D5 @2 F+ k, ?: \, W6 [nat (inside) 10 192.168.0.90 255.255.255.255 0 05 T: B6 Q: f F
nat (inside) 10 192.168.0.92 255.255.255.255 0 0
, L/ z" g# [$ E' Enat (inside) 10 192.168.0.93 255.255.255.255 0 0
5 b0 B: o2 J8 [ d r% M, @nat (inside) 10 192.168.0.94 255.255.255.255 0 0
3 V" o; J7 P# |- Fnat (inside) 10 192.168.0.95 255.255.255.255 0 0
# x: o6 x! P/ b$ E1 N( d% E& bnat (inside) 10 192.168.0.96 255.255.255.255 0 0
. Z4 J8 b: r+ u) Q4 ]) t: v8 a' t" z% _nat (inside) 10 192.168.0.97 255.255.255.255 0 0% D# r+ V6 ~' Y
nat (inside) 10 192.168.0.99 255.255.255.255 0 0
6 E6 d; Z9 r1 _/ ?; d' cnat (inside) 10 192.168.0.101 255.255.255.255 0 0
; b! v: U4 L& k" b6 n1 i2 ? Unat (inside) 10 192.168.0.102 255.255.255.255 0 03 y d' t0 V0 I
nat (inside) 10 192.168.0.103 255.255.255.255 0 0
9 R# z9 e* u: d ?. y$ Y3 Jnat (inside) 10 192.168.0.104 255.255.255.255 0 0- Q4 C6 f P h0 y
nat (inside) 10 192.168.0.106 255.255.255.255 0 0
0 u# `7 ^8 q+ C& F+ rnat (inside) 10 192.168.0.107 255.255.255.255 0 0( S7 X+ ~$ T# e* K+ V
nat (inside) 10 192.168.0.108 255.255.255.255 0 0. Q3 l* s4 Z6 R ?8 A# D& q, {: p
nat (inside) 10 192.168.0.118 255.255.255.255 0 0
, x4 Q5 d* U3 c) X4 unat (inside) 10 192.168.0.119 255.255.255.255 0 0
- p P0 E p r9 T- k4 ^! h; A5 inat (inside) 10 192.168.0.120 255.255.255.255 0 03 l2 P/ g/ y, V! e; |- ]9 _$ h- i/ \: Z* b
nat (inside) 10 192.168.0.121 255.255.255.255 0 0
' M+ S0 c: h1 A; q" h+ ?2 vnat (inside) 10 192.168.0.200 255.255.255.255 0 0) N! y* X4 e5 z2 ]) n
nat (inside) 10 192.168.0.201 255.255.255.255 0 0
2 C9 q$ O7 F9 J; g8 ~nat (inside) 10 192.168.0.202 255.255.255.255 0 0
5 R/ m3 y+ P/ T. Qnat (inside) 10 192.168.0.203 255.255.255.255 0 0. V5 S4 Q6 Q% `+ q6 ~' j
nat (inside) 10 192.168.0.204 255.255.255.255 0 0
$ D& ~8 l. D2 G6 {0 N! z Mnat (inside) 10 192.168.0.205 255.255.255.255 0 0" E {' o! l; d0 ~( j
nat (inside) 10 192.168.0.206 255.255.255.255 0 0
- x. Z! I: p. Y# \0 T; w& A4 {& t( ~nat (inside) 10 192.168.0.207 255.255.255.255 0 0
0 p2 A9 M( y9 M8 C8 \' h6 Vnat (inside) 10 192.168.0.208 255.255.255.255 0 09 k; z( G+ r8 t% U
nat (inside) 10 192.168.0.209 255.255.255.255 0 0& r, U* [4 [1 \- x+ Q5 T
nat (inside) 10 192.168.0.210 255.255.255.255 0 0
/ A9 v" u0 w8 ~3 vnat (inside) 10 192.168.0.211 255.255.255.255 0 0
' W4 b; M# v/ O8 Ynat (inside) 10 192.168.0.212 255.255.255.255 0 0
/ s) t3 |) ?( z. _6 `& d& Y: r* bnat (inside) 10 192.168.0.213 255.255.255.255 0 03 D. J3 _% L$ v
nat (inside) 10 192.168.0.214 255.255.255.255 0 0" p3 T0 P X0 U% b8 m% l# ]
nat (inside) 10 192.168.0.215 255.255.255.255 0 0
; T, m7 `% ]+ t: v0 F: |nat (inside) 0 192.168.0.0 255.255.255.0 0 0/ u( B/ @: C# C' D
nat (inside) 10 0.0.0.0 0.0.0.0 0 0+ x0 Q" X7 ^8 |
route outside 0.0.0.0 0.0.0.0 221.XXX.138.249 1" y1 U1 K" c- l. s3 l) m" l: q
timeout xlate 3:00:006 j- e0 w2 x+ V0 e
timeout conn 1:00:00 half-closed 0:10:00 udp 0:02:00 rpc 0:10:00 h225 1:00:004 _. a# [) g2 u; L9 k; v7 r7 D7 H
timeout h323 0:05:00 mgcp 0:05:00 sip 0:30:00 sip_media 0:02:00
$ O! W/ W" \2 e! h' Itimeout uauth 0:05:00 absolute
, P+ [- p' m$ g! b f5 Xaaa-server TACACS+ protocol tacacs+ 4 z9 b: _0 H" J. Y4 H3 ]* F, z
aaa-server RADIUS protocol radius
0 a( ?: |( S" Q3 O; q) W, \aaa-server LOCAL protocol local
! n1 n. K! a9 v8 m! q1 xhttp server enable
, a/ v* z: s/ x) \http 192.168.0.0 255.255.255.0 inside
5 ]6 }! A- N- W; g& ^. sno snmp-server location4 Y& d' n+ t6 M$ Y7 w9 y! l1 C' f" w5 @
no snmp-server contact9 m5 ~! I; C$ e7 s( t; o5 M, N
snmp-server community public
* a. ]- i' J1 {+ `) z/ eno snmp-server enable traps: c9 y. ?7 i& o) k- h3 u4 t
floodguard enable
) ~% x# v; B0 Csysopt connection permit-ipsec7 }9 s: m: Y; t/ L
sysopt connection permit-l2tp
P2 g! g1 E$ a% S# e, scrypto ipsec transform-set ESP-DES-SHA esp-des esp-sha-hmac
6 B/ j, c' Z' T/ J# M0 bcrypto ipsec transform-set ESP-DES-MD5 esp-des esp-md5-hmac ' a/ A1 a8 `: W+ C, N7 t' n: }
isakmp enable outside/ @% D% ]. w: b7 ?6 s( y
isakmp enable inside! m: j5 d4 m( F0 E* V5 H% g
telnet timeout 5
& Y1 J# M3 ^' K3 Fssh 0.0.0.0 0.0.0.0 outside" f Y+ a6 ?' G' i/ q
ssh 0.0.0.0 0.0.0.0 inside- l% W6 `8 H( O8 a
ssh timeout 5
% m/ p) G+ ?0 |+ G4 ~3 rconsole timeout 0! h9 `- E$ M7 X4 p. X% p
vpdn username wanhine password *********
! n9 B( a; w m: F# \vpdn enable outside' L1 S N: G' y3 y
vpdn enable inside
7 o$ z( u! t5 D/ ^. G, qdhcpd address 192.168.0.20-192.168.0.200 inside( Y, l1 r8 j) t2 @2 e
dhcpd dns 202.103.24.68 202.103.0.117% S1 l/ H6 \; p: R: ~% }
dhcpd lease 3600
8 R* `' }$ [8 A1 A' I& {( Pdhcpd ping_timeout 7503 {- ^, h* N0 l1 o0 P
terminal width 80( Y7 {6 ~- N/ W3 [) F# x7 `) f
Cryptochecksum:f40dc8963b7f456d60eac467e8c0ea87% m4 [ y% v0 p6 e
: end7 V! r/ E+ Z0 H( z4 y2 D9 F
[OK]8 M+ b$ I1 e6 F" ?6 t
8 j$ a4 O3 f& g( A# Z( u3 I8 w
' x- ^2 K% Z' Z0 v# z/ s) v' j# H
8 h, k, g% b2 c2 ~2 ^请高人指点.
- ^) ]# ~+ c/ Y: }- y2 n如果PDM无法实现,请发下完整的配置表谢谢,万分感谢! |
|