本站已运行 14年357天9小时11分10秒

攻城狮论坛

作者: rockv
查看: 6493|回复: 57

主题标签Tag

more +今日重磅推荐Recommend No.1

所有IT类厂商认证考试题库下载所有IT类厂商认证考试题库下载

more +随机图赏Gallery

【新盟教育】2023最新华为HCIA全套视频合集【网工基础全覆盖】---国sir公开课合集【新盟教育】2023最新华为HCIA全套视频合集【网工基础全覆盖】---国sir公开课合集
【新盟教育】网工小白必看的!2023最新版华为认证HCIA Datacom零基础全套实战课【新盟教育】网工小白必看的!2023最新版华为认证HCIA Datacom零基础全套实战课
原创_超融合自动化运维工具cvTools原创_超融合自动化运维工具cvTools
重量级~~30多套JAVA就业班全套 视频教程(请尽快下载,链接失效后不补)重量级~~30多套JAVA就业班全套 视频教程(请尽快下载,链接失效后不补)
链接已失效【超过几百G】EVE 国内和国外镜像 全有了 百度群分享链接已失效【超过几百G】EVE 国内和国外镜像 全有了 百度群分享
某linux大佬,积累多年的电子书(约300本)某linux大佬,积累多年的电子书(约300本)
乾颐堂现任明教教主Python完整版乾颐堂现任明教教主Python完整版
乾颐堂 教主技术进化论 2018-2019年 最新31-50期合集视频(各种最新技术杂谈视频)乾颐堂 教主技术进化论 2018-2019年 最新31-50期合集视频(各种最新技术杂谈视频)
Python学习视频 0起点视频 入门到项目实战篇 Python3.5.2视频教程 共847集 能学102天Python学习视频 0起点视频 入门到项目实战篇 Python3.5.2视频教程 共847集 能学102天
约21套Python视频合集 核心基础视频教程(共310G,已压缩)约21套Python视频合集 核心基础视频教程(共310G,已压缩)
最新20180811录制 IT爱好者-清风羽毛 - 网络安全IPSec VPN实验指南视频教程最新20180811录制 IT爱好者-清风羽毛 - 网络安全IPSec VPN实验指南视频教程
最新20180807录制EVE开机自启动虚拟路由器并桥接物理网卡充当思科路由器最新20180807录制EVE开机自启动虚拟路由器并桥接物理网卡充当思科路由器

[安全] ip sec vpn无法向内穿越nat,向高人求解

  [复制链接]
查看: 6493|回复: 57
开通VIP 免金币+免回帖+批量下载+无广告
1.网络拓扑如下图
5 j3 t) w9 i# y* {1 T" h. f' E, m/ n! {9 G
2.CISCO pix515e使用PDM3.0配置如下
7 d7 i' @6 H7 D) q+ B4 C# j
+ U& z" C# I$ J& m2 c9 t1 X, l5 m; f& o% U: G" o& t( z0 s! T, m% S% |
" G3 Z7 k4 Y) Y. y+ O5 \
* Y; u- n! ~& m* k  D
6 w: a8 ?: Y- o; I8 N/ |

( ^' Q/ f" B0 l2 U1 u9 X% i- w; ]8 i& f
3.拟实现的网络功能:公网计算机通过光纤、ADSL、WIFI、mobile等方式接入因特网,再通过windows自带的虚拟专用网拨号连接或者CISCO的VPN cilent拨入PIX515e内部的VpnServer,以实现接入VpnServer所在的局域网,共享局域网内的资源,VPN Server在内网测试通过。
* K6 R7 B' V" U- n+ z. o3 c
% u- `0 S5 m8 K  c- r& r4.遇到的问题:公网计算机无法通过pix515e的公网地址向内穿越NAT拨入VPNserver。能否在pix515e上建立一条Vpn Tunnel以实现第3条的网络功能,该如何建立。
- K% z2 e3 p: Q: |) T0 W0 x# I
9 u; u9 }6 i8 a" d5.已失败的方法+ D% M2 n+ y& j* b4 T
4 [- Z7 d8 M$ Y+ Z
A:端口映射,该思科设备通过NAT功能将内网IP转换为公网IP,不是路由器,无法做端口映射。
0 s- u/ u4 P6 @% b& k- C
1 j; i8 {! n2 N: F3 ^B:在PDM3.0上尝试对PIX515e进行VPN的设置,未能凑效。" }% x8 a! m! c) E( @# t/ [

' h% |) A/ ?5 cC:逆向NAT失败,PDM3.0不允许。
, [+ u  m0 w8 a- ^( V9 b
" W' ]9 b$ r+ u设备目前的配置列表
9 q( i. ]5 E! {/ O
! ^- j, {7 i$ _Building configuration...
+ P- [" n4 p( K0 `% }1 H6 x: Saved
8 h- ?# }% ?3 e6 ^:0 s0 l, m* _" Y7 q' j
PIX Version 6.3(3)
. @; G# h' h% w3 u6 V# E7 c. \interface ethernet0 auto
$ w$ {) X) K1 h# d3 z  v: E2 Z; Iinterface ethernet1 auto
  I8 i, P# Q/ @) Znameif ethernet0 outside security0* m" l2 Q: x3 N7 ?1 B) N
nameif ethernet1 inside security100
8 a6 {# f4 L8 Z; H. D5 j* tenable password /NNcO2U/e4a3IAX3 encrypted' I+ x  r) S. q' j6 ^  [8 ?7 r
passwd 2KFQnbNIdI.2KYOU encrypted
$ c6 t3 ?$ F9 f, @hostname huawei  M2 b" j/ O6 [- D  Z6 u9 ^+ J3 d# g
domain-name huawei.com
0 _! E/ d3 C) x* |6 afixup protocol dns maximum-length 512% M. F# \& T4 q+ q+ p3 N" S/ L
fixup protocol ftp 21# |) p. W" X$ a
fixup protocol h323 h225 1720
- E- ~( j- V5 s8 s& ofixup protocol h323 ras 1718-1719* J# T/ r, j9 M( {& T) L- k' T! W
fixup protocol http 80$ h) t- u* J  ~: O* }
fixup protocol rsh 514# z' m5 |  ]. R
fixup protocol rtsp 5540 Q/ N8 t8 ~" P6 ^9 ]! [0 G3 d
fixup protocol sip 5060
0 r$ |5 s( Y3 }. F- {% |4 b$ \# zfixup protocol sip udp 5060
) b# z' P, W# h: a; S4 u$ Q, ffixup protocol skinny 2000
. k8 H8 h1 C1 z, X6 {6 r6 {- j+ cfixup protocol smtp 25
  a1 D. H# K  M" ^1 ofixup protocol sqlnet 1521+ n" G- W- q( G8 v- o
fixup protocol tftp 69
) N' I% U& q& fnames
% r4 w8 i2 Q! Z  D" laccess-list outside_inbound_nat0_acl permit ip interface outside 192.168.0.0 255.255.255.0
( {: d+ Z# }5 Y$ q8 y; b: |. _* n1 Dpager lines 24
. m2 h5 ?4 ]: A: x3 Z3 g/ `" gmtu outside 1500
" b1 D2 f5 Y( O) \mtu inside 15003 Z2 v3 n3 g3 W% f) r/ b% \6 f
ip address outside 221.XXX.138.250 255.255.255.2524 h4 z- C% a5 U/ Y
ip address inside 192.168.0.254 255.255.255.07 |0 {  I0 ]8 o4 F+ v, j' u
ip audit info action alarm
% B, I) L7 C( X$ e) m- bip audit attack action alarm( d1 Z- ]" B( O
pdm location 192.168.0.3 255.255.255.255 inside
  q; F6 A" A) t6 m& _pdm location 192.168.0.24 255.255.255.255 inside
" }* q1 B' r* Kpdm location 192.168.0.1 255.255.255.255 inside
8 w2 l6 g( ^  X* L# l- xpdm location 192.168.0.2 255.255.255.255 inside
% t& g$ u* s; s$ E$ Updm location 192.168.0.12 255.255.255.255 inside  b8 X/ @# n, A" M1 H  B
pdm location 192.168.0.10 255.255.255.255 inside
* b# I* {, Q. |  xpdm location 192.168.0.16 255.255.255.255 inside! X" [! p: z2 U7 {
pdm location 192.168.0.19 255.255.255.255 inside
1 V4 [* |/ I  U* Fpdm location 192.168.0.20 255.255.255.255 inside
0 k/ b1 L: q# p2 n" C$ J  h. Ipdm location 192.168.0.22 255.255.255.255 inside2 d! }* U1 K' q# S8 f8 Y
pdm location 192.168.0.23 255.255.255.255 inside7 r- N2 Z6 u4 C. J8 l* S# L
pdm location 192.168.0.34 255.255.255.255 inside  h8 t  {1 w' O; P7 x% \8 S
pdm location 192.168.0.38 255.255.255.255 inside
8 {" g* F( c  ?- V* J9 E: V6 cpdm location 192.168.0.40 255.255.255.255 inside, t& h: n# x8 w1 l
pdm location 192.168.0.58 255.255.255.255 inside
, B; P/ Z. v5 C1 q- D8 Updm location 192.168.0.17 255.255.255.255 inside
- w  r2 {  Y5 D+ D! G# T3 apdm location 192.168.0.39 255.255.255.255 inside/ S- Y+ g) d% [. @
pdm location 192.168.0.41 255.255.255.255 inside/ T' O7 M# f, Q: U; f
pdm location 192.168.0.13 255.255.255.255 inside
- P+ {6 [3 P0 I' Q, ^  M- kpdm location 192.168.0.42 255.255.255.255 inside
* P9 g. C- k4 T# t' [- opdm location 192.168.0.45 255.255.255.255 inside) G  E8 e0 U3 u) F* K
pdm location 192.168.0.46 255.255.255.255 inside
; u3 q- f0 _2 S: S6 Z" Xpdm location 192.168.0.47 255.255.255.255 inside
8 A* i7 b# D; ppdm location 192.168.0.50 255.255.255.255 inside) Z1 D8 e. ?$ F- Q3 \$ I
pdm location 192.168.0.25 255.255.255.255 inside
3 T# z0 {8 O- Zpdm location 192.168.0.4 255.255.255.255 inside
& Q. K4 }+ {1 k) f9 I% ]1 vpdm location 192.168.0.6 255.255.255.255 inside0 p/ c/ c8 Z3 q* [1 H( \
pdm location 192.168.0.35 255.255.255.255 inside* Z* g" M; _6 c1 {+ s' L3 J
pdm location 192.168.0.21 255.255.255.255 inside
( F: C. |  k( ^$ c' hpdm location 192.168.0.200 255.255.255.255 inside+ _  M) _3 _7 f* o
pdm location 192.168.0.48 255.255.255.255 inside" o. J7 Y; x" x: G
pdm location 192.168.0.60 255.255.255.255 inside
# R2 W: i- J/ I* W8 r: |( xpdm location 192.168.0.51 255.255.255.255 inside
8 n, F* O, H: D3 Y! wpdm location 192.168.0.32 255.255.255.255 inside# O9 P3 L; k) @% W
pdm location 192.168.0.18 255.255.255.255 inside! d4 X( ~/ r3 z$ _
pdm location 192.168.0.7 255.255.255.255 inside
! J. F3 [) T7 k9 Updm location 192.168.0.201 255.255.255.255 inside
5 |( o5 J. N# A; y/ z2 q& t9 bpdm location 192.168.0.36 255.255.255.255 inside
6 {( G) o7 N  @! i* n% F, G7 Mpdm location 192.168.0.100 255.255.255.255 inside
7 x+ s+ `7 D+ Dpdm location 192.168.0.5 255.255.255.255 inside
9 U$ }9 V& v! L. U$ Qpdm location 192.168.0.202 255.255.255.255 inside4 L3 t7 F6 P% _4 t
pdm location 192.168.0.26 255.255.255.255 inside8 ]# e% r' D, k1 U8 S: D6 v& P  m
pdm location 192.168.0.203 255.255.255.255 inside) P/ B, a' ^2 L7 c; p) t
pdm location 192.168.0.14 255.255.255.255 inside
" w" t! K6 q- X8 _5 @: ^pdm location 192.168.0.204 255.255.255.255 inside9 c3 j; K% J5 k
pdm location 192.168.0.251 255.255.255.255 inside
* c& R$ J* }$ q- K; t. T2 ipdm location 192.168.0.205 255.255.255.255 inside2 ?. N: R; G' c
pdm location 192.168.0.206 255.255.255.255 inside
7 F/ l" x( J2 ]$ D7 Npdm location 192.168.0.207 255.255.255.255 inside& G" o) n, j- s$ T9 N: r3 ^3 W
pdm location 192.168.0.208 255.255.255.255 inside. @/ Y' }% @: v1 E; v
pdm location 192.168.0.209 255.255.255.255 inside/ x: c2 k5 T- g* q' l0 D
pdm location 192.168.0.108 255.255.255.255 inside3 Y1 i' r% N* Y( f/ |" K" m4 l& J
pdm location 192.168.0.31 255.255.255.255 inside6 M, T  p- N* L$ G6 S
pdm location 192.168.0.30 255.255.255.255 inside
0 Y, z( O+ e  u, y* k9 opdm location 192.168.0.210 255.255.255.255 inside6 k" I2 [/ @( D+ w) P7 T
pdm location 192.168.0.8 255.255.255.255 inside
& u5 ^5 W, B' _7 g9 g. @# ipdm location 192.168.0.11 255.255.255.255 inside
: v4 ], I+ l9 G: i7 M% ^pdm location 192.168.0.29 255.255.255.255 inside/ `" `% F7 e' P! q
pdm location 192.168.0.109 255.255.255.255 inside
. i0 ]4 Z4 `/ O) D0 _# spdm location 192.168.0.111 255.255.255.255 inside
/ |. \7 J6 i, a7 k+ K/ Ppdm location 192.168.0.116 255.255.255.255 inside' \7 n) b7 u& z# D% r, z" U& n) |1 k
pdm location 192.168.0.113 255.255.255.255 inside9 J! K# ?8 |! T' v6 p5 ?
pdm location 192.168.0.107 255.255.255.255 inside
( i+ g# t! {" ^pdm location 192.168.0.240 255.255.255.255 inside
' J8 m0 L& G& `pdm location 192.168.0.241 255.255.255.255 inside+ i+ \* y9 s! [; t( p# }
pdm location 192.168.0.233 255.255.255.255 inside0 z  z( g3 @7 l! ~% o# Q. D
pdm location 192.168.0.250 255.255.255.255 inside6 t8 P* _9 m% ]6 M1 A
pdm location 192.168.0.252 255.255.255.255 inside, b) D. o% Y/ b! o4 u
pdm location 192.168.0.253 255.255.255.255 inside
4 A! W, e1 B$ i4 I; `pdm location 192.168.0.44 255.255.255.255 inside
; `5 J& R/ H6 C: l: P  Rpdm location 192.168.0.242 255.255.255.255 inside2 k0 l' {8 U7 ?
pdm location 192.168.0.239 255.255.255.255 inside# x6 h7 B5 U& c& `/ c  M, E- i, Z
pdm location 192.168.0.27 255.255.255.255 inside
$ {' D2 {4 o' {& T( P+ ]9 jpdm location 192.168.0.249 255.255.255.255 inside& ^$ o1 l  d( @  u7 @
pdm location 192.168.0.61 255.255.255.255 inside
9 I; F: n5 {# U6 ~7 u+ c' G- ^pdm location 192.168.0.62 255.255.255.255 inside
. u) j; E# J) A3 X9 K6 k  [/ m- hpdm location 192.168.0.63 255.255.255.255 inside
! B% b. ]8 L8 D9 Y5 z: cpdm location 192.168.0.64 255.255.255.255 inside
3 P/ y5 @1 p9 p0 ]pdm location 192.168.0.68 255.255.255.255 inside
- @# d. H. o# x- {3 `- _0 epdm location 192.168.0.211 255.255.255.255 inside- V2 E/ c) {# e* z& g0 i  |
pdm location 192.168.0.70 255.255.255.255 inside& X+ y) k% S/ [" d3 M/ @
pdm location 192.168.0.65 255.255.255.255 inside0 m* K" G9 q9 a* c  j
pdm location 192.168.0.121 255.255.255.255 inside
1 j9 D1 D! m: i2 N+ Dpdm location 192.168.0.247 255.255.255.255 inside' _6 A) Y2 p) u! D4 x
pdm location 192.168.0.37 255.255.255.255 inside
- J0 Z# x0 T' H% s2 h# l9 Kpdm location 192.168.0.73 255.255.255.255 inside
* A9 Z3 J2 ~3 ?/ u9 I1 u- Kpdm location 192.168.0.112 255.255.255.255 inside
! o: l5 I2 L) S9 g# fpdm location 192.168.0.57 255.255.255.255 inside8 Q5 {0 V. I! K& f
pdm location 192.168.0.99 255.255.255.255 inside
6 a! Z& x$ E; N' t9 {" I* x9 {; mpdm location 192.168.0.124 255.255.255.255 inside9 H1 q8 M2 h9 Y
pdm location 192.168.0.52 255.255.255.255 inside1 L+ _. R, C- w) a/ i3 V/ p
pdm location 192.168.0.118 255.255.255.255 inside
% \" M0 i$ F  [* O2 h) wpdm location 192.168.0.122 255.255.255.255 inside, ]2 N4 A' z8 h3 ?
pdm location 192.168.0.49 255.255.255.255 inside5 D! P( L# @/ g0 f1 [0 `
pdm location 192.168.0.55 255.255.255.255 inside
1 y$ ^) _9 M$ G( q7 ?! p: opdm location 192.168.0.43 255.255.255.255 inside
/ H' E3 L9 T6 C6 v- d) zpdm location 192.168.0.103 255.255.255.255 inside+ s( O; _/ m; z# }! B* U4 C
pdm location 192.168.0.54 255.255.255.255 inside9 q, }5 y; @3 V" M
pdm location 192.168.0.243 255.255.255.255 inside
8 M4 J$ }8 P' Z& P* |pdm location 192.168.0.244 255.255.255.255 inside
+ a/ R( `! A, y! d+ G6 vpdm location 192.168.0.230 255.255.255.255 inside( E. R  A+ C7 d
pdm location 192.168.0.135 255.255.255.255 inside
8 |0 m3 F% i0 K, V# Lpdm location 192.168.0.115 255.255.255.255 inside. ]% \3 s7 |% P& z! O- t
pdm location 192.168.0.245 255.255.255.255 inside* c. @7 C/ v' ^  o' K( J) q) t
pdm location 192.168.0.238 255.255.255.255 inside
* n" l/ f0 o8 u3 O6 e6 @pdm location 192.168.0.237 255.255.255.255 inside! z; s$ m3 t/ ~- u0 [3 @9 h
pdm location 192.168.0.231 255.255.255.255 inside
) |: l3 J& e1 `3 R8 \) t& y; j9 Y2 Jpdm location 192.168.0.235 255.255.255.255 inside
  B$ _! U8 k4 ?; y9 H, V9 n! t) w  @pdm location 192.168.0.236 255.255.255.255 inside0 h% |2 W4 y5 [7 X. I& T- p/ i
pdm location 192.168.0.190 255.255.255.255 inside, q/ w( x' ^7 W# Y" V/ u# B; c2 \
pdm location 192.168.0.181 255.255.255.255 inside
2 @2 Z  c% v* spdm location 192.168.0.9 255.255.255.255 inside
2 H0 y7 b" S/ o. R; B5 z2 Gpdm location 192.168.0.246 255.255.255.255 inside
2 n- n6 o9 S7 A+ r: f. B! ppdm location 192.168.0.59 255.255.255.255 inside& }' i6 z7 w& T0 }) {8 f# f( }
pdm location 192.168.0.191 255.255.255.255 inside# y5 i# C2 Y+ R/ r) f
pdm location 192.168.0.117 255.255.255.255 inside6 t$ N4 c; S, ~3 {0 K
pdm location 192.168.0.171 255.255.255.255 inside
1 j/ X+ F! l& i  e6 spdm location 192.168.0.53 255.255.255.255 inside7 F# Y# _( X8 s% U: C7 f/ Q( f9 w
pdm location 192.168.0.130 255.255.255.255 inside
' o; ?$ Q+ r: d' f, Jpdm location 192.168.0.91 255.255.255.255 inside; o  @3 W0 X3 p. x, X' x
pdm location 192.168.0.140 255.255.255.255 inside$ k/ z3 h9 ^) T( F% _* a; D
pdm location 192.168.0.220 255.255.255.255 inside
# r" P* k# k( b4 `) I' Y! _pdm location 192.168.0.119 255.255.255.255 inside- {; C8 C% _: U& _: M& b! F
pdm location 192.168.0.223 255.255.255.255 inside
+ @1 ]7 [" U6 k+ Vpdm location 192.168.0.106 255.255.255.255 inside3 s- n; I* G; C/ S% |0 u" ~1 h4 _
pdm location 192.168.0.123 255.255.255.255 inside! s- k8 z" t8 |
pdm location 192.168.0.67 255.255.255.255 inside
- G) m! F4 \! I9 ^; D# Z( N$ @7 fpdm location 192.168.0.219 255.255.255.255 inside7 I3 g; _4 A9 @% p/ N
pdm location 192.168.0.56 255.255.255.255 inside2 t7 C, d1 x, g5 X! r0 t  o, N* m" \
pdm location 192.168.0.66 255.255.255.255 inside
% ?8 [; u1 a' o" K. D! Wpdm location 192.168.0.76 255.255.255.255 inside
- a5 @/ T8 B$ U2 Ypdm location 192.168.0.102 255.255.255.255 inside4 w# X( z" U9 z7 D  b3 ~2 K6 T* e
pdm location 192.168.0.170 255.255.255.255 inside+ K+ j2 N3 a% T' j/ V
pdm location 192.168.0.172 255.255.255.255 inside! r; L+ S7 \8 F: b! i) [
pdm location 192.168.0.173 255.255.255.255 inside$ F* O7 V7 y/ M6 A1 e
pdm location 192.168.0.174 255.255.255.255 inside
% W0 `3 q- n$ g+ {$ @' wpdm location 192.168.0.175 255.255.255.255 inside
& t; y" f, z, r3 F+ I1 K" `$ ^pdm location 192.168.0.160 255.255.255.255 inside
) J# @% a8 [4 T2 n" o1 {5 spdm location 192.168.0.138 255.255.255.255 inside  M+ r2 ?# e" k+ U! _$ F' @. }. W: M
pdm location 192.168.0.78 255.255.255.255 inside2 |; i+ z" ?4 I( b+ y3 t9 A: O
pdm location 192.168.0.69 255.255.255.255 inside
5 H. P- z: m* mpdm location 192.168.0.221 255.255.255.255 inside, ]* g: E0 Z. S8 G9 B$ `
pdm location 192.168.0.110 255.255.255.255 inside; G3 [9 A, H9 |8 z9 ^
pdm location 192.168.0.232 255.255.255.255 inside0 j  b& {0 H* ]9 J/ K
pdm location 192.168.0.80 255.255.255.255 inside
* A" ~; n' a, a0 C; ypdm location 192.168.0.81 255.255.255.255 inside
  F$ }, m' T. C6 \) s7 ^. Npdm location 192.168.0.82 255.255.255.255 inside$ O1 B. E8 `7 A5 M3 @, j
pdm location 192.168.0.83 255.255.255.255 inside  n4 S1 C+ Z5 }. b# i  W) N  m( M
pdm location 192.168.0.84 255.255.255.255 inside2 c: R6 ~/ n9 `4 t+ I+ W: r$ H
pdm location 192.168.0.85 255.255.255.255 inside
, M  U6 G: a& w) gpdm location 192.168.0.86 255.255.255.255 inside
6 }3 A1 x" q0 L) T5 a: c7 Xpdm location 192.168.0.87 255.255.255.255 inside  P! x, H/ K8 F! ^
pdm location 192.168.0.88 255.255.255.255 inside: ~7 K$ w$ l# R/ B) R/ R
pdm location 192.168.0.89 255.255.255.255 inside
' b6 u) |5 H. c0 Fpdm location 192.168.0.90 255.255.255.255 inside
4 R' d% ~4 f. d4 `/ npdm location 192.168.0.28 255.255.255.255 inside
: V2 s' c. y9 p# c% _& Spdm location 192.168.0.234 255.255.255.255 inside; z6 r- [8 Q# q6 j2 I! Y
pdm location 192.168.0.222 255.255.255.255 inside. c3 I* I7 V* R1 l
pdm location 192.168.0.150 255.255.255.255 inside6 X4 s# ~0 g5 a9 \
pdm location 192.168.0.151 255.255.255.255 inside
; r; n: t4 s: k3 R- S0 _pdm location 192.168.0.152 255.255.255.255 inside
! ?7 z, E/ g" Q( Qpdm location 192.168.0.77 255.255.255.255 inside
2 e& M( m4 s# ?& c$ p- r: Z* dpdm location 192.168.0.72 255.255.255.255 inside
# w+ s$ |; X' ~8 d' N; S! epdm location 192.168.0.225 255.255.255.255 inside, c3 F$ K6 f& d$ j; ?# N4 X! Q0 V
pdm location 192.168.0.161 255.255.255.255 inside5 G" M# W2 I$ {, B8 M% q
pdm location 192.168.0.92 255.255.255.255 inside( f( p  @, U5 M0 t
pdm location 192.168.0.192 255.255.255.255 inside: u) o6 J$ Y; w; y
pdm location 192.168.0.193 255.255.255.255 inside) ?6 t2 v- k: F# w) w6 m% _
pdm location 192.168.0.15 255.255.255.255 inside) q- T- e& x% X5 p
pdm location 192.168.0.33 255.255.255.255 inside
: F" T. n5 k1 W7 K7 k& {) T9 P. tpdm location 192.168.0.79 255.255.255.255 inside
( Y: J+ M2 P) e; b5 S9 Jpdm location 192.168.0.93 255.255.255.255 inside8 G! Q4 |4 G8 L# V2 C, Q: ]
pdm location 192.168.0.94 255.255.255.255 inside5 r) F3 `$ ?/ _5 [- Y
pdm location 192.168.0.95 255.255.255.255 inside
1 M+ I8 e9 n$ u. o& N- d7 E! p! t0 Xpdm location 192.168.0.96 255.255.255.255 inside
+ x' s  R' D3 V1 M& I2 Dpdm location 192.168.0.97 255.255.255.255 inside
" E- h5 w; d$ |  k$ Dpdm location 192.168.0.98 255.255.255.255 inside
4 `2 U/ b4 V% G) J- Updm location 192.168.0.101 255.255.255.255 inside* k1 ^/ d1 Q3 U+ }  m3 h- `( d
pdm location 192.168.0.104 255.255.255.255 inside
- |- i# ?6 x& lpdm location 221.XXX.138.250 255.255.255.255 inside
# K: D* s; U* F/ [# r  ?pdm location 192.168.0.71 255.255.255.255 inside
3 {$ c; i; [9 L# N& C$ U, Q. v( updm location 192.168.0.185 255.255.255.255 inside
  |& X5 D7 D, w# _- N5 S# m5 O# tpdm location 192.168.0.75 255.255.255.255 inside
, W2 ?2 V/ s" H1 t5 xpdm location 192.168.0.120 255.255.255.255 inside! w/ |' A9 l, K; q9 J% h
pdm location 192.168.0.212 255.255.255.255 inside  U7 _; ]  }! \" ]
pdm location 192.168.0.213 255.255.255.255 inside
% `  A. x9 x+ P+ m7 y- t* y& ]pdm location 192.168.0.214 255.255.255.255 inside/ v1 v4 \; `2 K, @7 K
pdm location 192.168.0.215 255.255.255.255 inside: R/ s% v4 `: V) G% j
pdm location 192.168.0.128 255.255.255.192 outside' q* o/ Z' m/ V1 D9 n9 w5 L
pdm history enable, U9 f- N. E2 T7 j# q/ e
arp timeout 14400
3 s% X3 Z# r( e6 Rglobal (outside) 10 interface
5 B5 e5 j5 |/ L( A# ~nat (outside) 0 access-list outside_inbound_nat0_acl outside) d" P5 }. s2 p2 t' S
nat (inside) 10 192.168.0.1 255.255.255.255 0 0% f2 ^2 f# X0 |  Z
nat (inside) 10 192.168.0.3 255.255.255.255 0 0
+ P7 C6 z& Z% ^% g7 L( @9 lnat (inside) 10 192.168.0.4 255.255.255.255 0 0
: P8 ^9 K2 p: V: m7 C1 E- g1 \nat (inside) 10 192.168.0.5 255.255.255.255 0 0- X0 J3 k7 m4 K
nat (inside) 10 192.168.0.10 255.255.255.255 0 0
/ p2 z  H9 B7 _  B- O# hnat (inside) 10 192.168.0.11 255.255.255.255 0 0, l: c) j0 u. z: L+ d; `- {1 a. i
nat (inside) 10 192.168.0.12 255.255.255.255 0 0
+ N: |- p6 P( i) ^' t: ~# Anat (inside) 10 192.168.0.13 255.255.255.255 0 00 p/ a  g6 q, a  e
nat (inside) 10 192.168.0.14 255.255.255.255 0 0) K# J* j* `" j& D2 S
nat (inside) 10 192.168.0.15 255.255.255.255 0 0. b! q* W% f3 E# O& V
nat (inside) 10 192.168.0.16 255.255.255.255 0 0' t; c- r- d4 R* U* g* N9 V
nat (inside) 10 192.168.0.17 255.255.255.255 0 09 e- ^$ _8 r" W5 z0 h
nat (inside) 10 192.168.0.21 255.255.255.255 0 0
) c1 q( G6 s( U2 k( [nat (inside) 10 192.168.0.22 255.255.255.255 0 0
8 [. @) _6 S& h8 ^  L% v5 t5 Snat (inside) 10 192.168.0.23 255.255.255.255 0 00 H" n1 r, h& e
nat (inside) 10 192.168.0.24 255.255.255.255 0 0
6 l- }9 M, z7 L# l& knat (inside) 10 192.168.0.25 255.255.255.255 0 03 F9 C! z$ _) C, f. r: w
nat (inside) 10 192.168.0.26 255.255.255.255 0 0& j' d% I! a3 r3 @
nat (inside) 10 192.168.0.27 255.255.255.255 0 0( k# B& x/ Q1 U& \" i. I* @0 k) M
nat (inside) 10 192.168.0.29 255.255.255.255 0 0  p+ ?7 j" ~  a' Y
nat (inside) 10 192.168.0.31 255.255.255.255 0 0$ e  E3 j0 u2 q% W3 g' U% b4 C+ q# H
nat (inside) 10 192.168.0.32 255.255.255.255 0 0
' F2 o: \8 T% n8 w2 h$ nnat (inside) 10 192.168.0.33 255.255.255.255 0 0/ w0 ^9 T5 W- X8 [# O- ?
nat (inside) 10 192.168.0.34 255.255.255.255 0 0
+ g- r0 t0 _' d. \! Y+ b$ b4 D+ inat (inside) 10 192.168.0.37 255.255.255.255 0 0" U; X) y) B9 u% b6 }( @& m
nat (inside) 10 192.168.0.39 255.255.255.255 0 0. d/ k+ l: M2 P; F% I5 b
nat (inside) 10 192.168.0.40 255.255.255.255 0 03 Z  }7 {* _* H0 H1 B
nat (inside) 10 192.168.0.44 255.255.255.255 0 0$ r/ D" a* c# h( H
nat (inside) 10 192.168.0.45 255.255.255.255 0 05 Z2 U/ v- o/ Q( G' C3 v
nat (inside) 10 192.168.0.47 255.255.255.255 0 0
1 s9 T( Z- Q4 {; dnat (inside) 10 192.168.0.48 255.255.255.255 0 0+ [7 ~/ Y2 W% @; E
nat (inside) 10 192.168.0.49 255.255.255.255 0 01 g, f! H/ O+ s
nat (inside) 10 192.168.0.50 255.255.255.255 0 0
! b8 N6 B1 E7 h& w4 E" Dnat (inside) 10 192.168.0.51 255.255.255.255 0 0
1 E4 [4 h1 x$ J$ e6 u. P6 U* L) Znat (inside) 10 192.168.0.52 255.255.255.255 0 0
3 v& J5 [9 g; t: inat (inside) 10 192.168.0.53 255.255.255.255 0 0# H* F4 ~# w! ]4 g+ S4 l& [
nat (inside) 10 192.168.0.54 255.255.255.255 0 0
: s  Y$ q* q  z' {5 h9 Bnat (inside) 10 192.168.0.55 255.255.255.255 0 05 [2 ]: K% X( ?. v' Z
nat (inside) 10 192.168.0.56 255.255.255.255 0 0
! L! v0 B+ Y8 vnat (inside) 10 192.168.0.57 255.255.255.255 0 0+ W0 V: T1 k8 d7 S* U/ |( N8 i
nat (inside) 10 192.168.0.58 255.255.255.255 0 0- G' _, F2 ~8 Q
nat (inside) 10 192.168.0.59 255.255.255.255 0 0
" h8 c( L1 E/ i. r/ Mnat (inside) 10 192.168.0.62 255.255.255.255 0 0, n7 ?% _2 J+ D5 X
nat (inside) 10 192.168.0.63 255.255.255.255 0 05 D1 U& m. [+ t
nat (inside) 10 192.168.0.64 255.255.255.255 0 0, s! H8 O" r* ?
nat (inside) 10 192.168.0.65 255.255.255.255 0 0
0 }- o0 R/ c- {' [7 w. qnat (inside) 10 192.168.0.66 255.255.255.255 0 0
1 \% p1 `; c" X! M' W/ unat (inside) 10 192.168.0.67 255.255.255.255 0 0% y7 o  p5 N% n0 Z: h
nat (inside) 10 192.168.0.68 255.255.255.255 0 0
# o, h1 k7 U' P* i; Lnat (inside) 10 192.168.0.69 255.255.255.255 0 04 m" y1 f6 {2 i& `
nat (inside) 10 192.168.0.71 255.255.255.255 0 0
- ]5 v$ [. s- D1 I7 O8 Vnat (inside) 10 192.168.0.73 255.255.255.255 0 0
; x; t3 C+ m* B1 ?- s( ?$ rnat (inside) 10 192.168.0.76 255.255.255.255 0 06 ~9 a: a/ t  O. f& E! M% X' X
nat (inside) 10 192.168.0.79 255.255.255.255 0 0  D) F# g* ]* E4 Z* f5 u0 j
nat (inside) 10 192.168.0.80 255.255.255.255 0 0
8 o+ @+ n, p: ~nat (inside) 10 192.168.0.81 255.255.255.255 0 0
9 O+ y: Q, Q# b; X& R' Q; p+ n: qnat (inside) 10 192.168.0.82 255.255.255.255 0 0
; w: B: J6 |6 g2 h' D9 B7 @nat (inside) 10 192.168.0.83 255.255.255.255 0 0
5 w/ D$ F5 j* |0 Lnat (inside) 10 192.168.0.85 255.255.255.255 0 0
1 j1 H2 c* M$ \% Z( n' p* {% nnat (inside) 10 192.168.0.86 255.255.255.255 0 02 t% U) n' B* l( C+ ]" w' o
nat (inside) 10 192.168.0.87 255.255.255.255 0 00 u" e7 {. ?) t* }+ D, b/ l
nat (inside) 10 192.168.0.89 255.255.255.255 0 0
1 ]7 J( D5 @2 F+ k, ?: \, W6 [nat (inside) 10 192.168.0.90 255.255.255.255 0 05 T: B6 Q: f  F
nat (inside) 10 192.168.0.92 255.255.255.255 0 0
, L/ z" g# [$ E' Enat (inside) 10 192.168.0.93 255.255.255.255 0 0
5 b0 B: o2 J8 [  d  r% M, @nat (inside) 10 192.168.0.94 255.255.255.255 0 0
3 V" o; J7 P# |- Fnat (inside) 10 192.168.0.95 255.255.255.255 0 0
# x: o6 x! P/ b$ E1 N( d% E& bnat (inside) 10 192.168.0.96 255.255.255.255 0 0
. Z4 J8 b: r+ u) Q4 ]) t: v8 a' t" z% _nat (inside) 10 192.168.0.97 255.255.255.255 0 0% D# r+ V6 ~' Y
nat (inside) 10 192.168.0.99 255.255.255.255 0 0
6 E6 d; Z9 r1 _/ ?; d' cnat (inside) 10 192.168.0.101 255.255.255.255 0 0
; b! v: U4 L& k" b6 n1 i2 ?  Unat (inside) 10 192.168.0.102 255.255.255.255 0 03 y  d' t0 V0 I
nat (inside) 10 192.168.0.103 255.255.255.255 0 0
9 R# z9 e* u: d  ?. y$ Y3 Jnat (inside) 10 192.168.0.104 255.255.255.255 0 0- Q4 C6 f  P  h0 y
nat (inside) 10 192.168.0.106 255.255.255.255 0 0
0 u# `7 ^8 q+ C& F+ rnat (inside) 10 192.168.0.107 255.255.255.255 0 0( S7 X+ ~$ T# e* K+ V
nat (inside) 10 192.168.0.108 255.255.255.255 0 0. Q3 l* s4 Z6 R  ?8 A# D& q, {: p
nat (inside) 10 192.168.0.118 255.255.255.255 0 0
, x4 Q5 d* U3 c) X4 unat (inside) 10 192.168.0.119 255.255.255.255 0 0
- p  P0 E  p  r9 T- k4 ^! h; A5 inat (inside) 10 192.168.0.120 255.255.255.255 0 03 l2 P/ g/ y, V! e; |- ]9 _$ h- i/ \: Z* b
nat (inside) 10 192.168.0.121 255.255.255.255 0 0
' M+ S0 c: h1 A; q" h+ ?2 vnat (inside) 10 192.168.0.200 255.255.255.255 0 0) N! y* X4 e5 z2 ]) n
nat (inside) 10 192.168.0.201 255.255.255.255 0 0
2 C9 q$ O7 F9 J; g8 ~nat (inside) 10 192.168.0.202 255.255.255.255 0 0
5 R/ m3 y+ P/ T. Qnat (inside) 10 192.168.0.203 255.255.255.255 0 0. V5 S4 Q6 Q% `+ q6 ~' j
nat (inside) 10 192.168.0.204 255.255.255.255 0 0
$ D& ~8 l. D2 G6 {0 N! z  Mnat (inside) 10 192.168.0.205 255.255.255.255 0 0" E  {' o! l; d0 ~( j
nat (inside) 10 192.168.0.206 255.255.255.255 0 0
- x. Z! I: p. Y# \0 T; w& A4 {& t( ~nat (inside) 10 192.168.0.207 255.255.255.255 0 0
0 p2 A9 M( y9 M8 C8 \' h6 Vnat (inside) 10 192.168.0.208 255.255.255.255 0 09 k; z( G+ r8 t% U
nat (inside) 10 192.168.0.209 255.255.255.255 0 0& r, U* [4 [1 \- x+ Q5 T
nat (inside) 10 192.168.0.210 255.255.255.255 0 0
/ A9 v" u0 w8 ~3 vnat (inside) 10 192.168.0.211 255.255.255.255 0 0
' W4 b; M# v/ O8 Ynat (inside) 10 192.168.0.212 255.255.255.255 0 0
/ s) t3 |) ?( z. _6 `& d& Y: r* bnat (inside) 10 192.168.0.213 255.255.255.255 0 03 D. J3 _% L$ v
nat (inside) 10 192.168.0.214 255.255.255.255 0 0" p3 T0 P  X0 U% b8 m% l# ]
nat (inside) 10 192.168.0.215 255.255.255.255 0 0
; T, m7 `% ]+ t: v0 F: |nat (inside) 0 192.168.0.0 255.255.255.0 0 0/ u( B/ @: C# C' D
nat (inside) 10 0.0.0.0 0.0.0.0 0 0+ x0 Q" X7 ^8 |
route outside 0.0.0.0 0.0.0.0 221.XXX.138.249 1" y1 U1 K" c- l. s3 l) m" l: q
timeout xlate 3:00:006 j- e0 w2 x+ V0 e
timeout conn 1:00:00 half-closed 0:10:00 udp 0:02:00 rpc 0:10:00 h225 1:00:004 _. a# [) g2 u; L9 k; v7 r7 D7 H
timeout h323 0:05:00 mgcp 0:05:00 sip 0:30:00 sip_media 0:02:00
$ O! W/ W" \2 e! h' Itimeout uauth 0:05:00 absolute
, P+ [- p' m$ g! b  f5 Xaaa-server TACACS+ protocol tacacs+ 4 z9 b: _0 H" J. Y4 H3 ]* F, z
aaa-server RADIUS protocol radius
0 a( ?: |( S" Q3 O; q) W, \aaa-server LOCAL protocol local
! n1 n. K! a9 v8 m! q1 xhttp server enable
, a/ v* z: s/ x) \http 192.168.0.0 255.255.255.0 inside
5 ]6 }! A- N- W; g& ^. sno snmp-server location4 Y& d' n+ t6 M$ Y7 w9 y! l1 C' f" w5 @
no snmp-server contact9 m5 ~! I; C$ e7 s( t; o5 M, N
snmp-server community public
* a. ]- i' J1 {+ `) z/ eno snmp-server enable traps: c9 y. ?7 i& o) k- h3 u4 t
floodguard enable
) ~% x# v; B0 Csysopt connection permit-ipsec7 }9 s: m: Y; t/ L
sysopt connection permit-l2tp
  P2 g! g1 E$ a% S# e, scrypto ipsec transform-set ESP-DES-SHA esp-des esp-sha-hmac
6 B/ j, c' Z' T/ J# M0 bcrypto ipsec transform-set ESP-DES-MD5 esp-des esp-md5-hmac ' a/ A1 a8 `: W+ C, N7 t' n: }
isakmp enable outside/ @% D% ]. w: b7 ?6 s( y
isakmp enable inside! m: j5 d4 m( F0 E* V5 H% g
telnet timeout 5
& Y1 J# M3 ^' K3 Fssh 0.0.0.0 0.0.0.0 outside" f  Y+ a6 ?' G' i/ q
ssh 0.0.0.0 0.0.0.0 inside- l% W6 `8 H( O8 a
ssh timeout 5
% m/ p) G+ ?0 |+ G4 ~3 rconsole timeout 0! h9 `- E$ M7 X4 p. X% p
vpdn username wanhine password *********
! n9 B( a; w  m: F# \vpdn enable outside' L1 S  N: G' y3 y
vpdn enable inside
7 o$ z( u! t5 D/ ^. G, qdhcpd address 192.168.0.20-192.168.0.200 inside( Y, l1 r8 j) t2 @2 e
dhcpd dns 202.103.24.68 202.103.0.117% S1 l/ H6 \; p: R: ~% }
dhcpd lease 3600
8 R* `' }$ [8 A1 A' I& {( Pdhcpd ping_timeout 7503 {- ^, h* N0 l1 o0 P
terminal width 80( Y7 {6 ~- N/ W3 [) F# x7 `) f
Cryptochecksum:f40dc8963b7f456d60eac467e8c0ea87% m4 [  y% v0 p6 e
: end7 V! r/ E+ Z0 H( z4 y2 D9 F
[OK]8 M+ b$ I1 e6 F" ?6 t
8 j$ a4 O3 f& g( A# Z( u3 I8 w
' x- ^2 K% Z' Z0 v# z/ s) v' j# H

8 h, k, g% b2 c2 ~2 ^请高人指点.
- ^) ]# ~+ c/ Y: }- y2 n如果PDM无法实现,请发下完整的配置表谢谢,万分感谢!
CCNA考试 官方正规报名 仅需1500元
回复 论坛版权

举报

迷糊蓝调 [Lv4 初露锋芒] 发表于 2013-9-8 03:22:37 | 显示全部楼层
1.网络拓扑如下图
( f* ^2 @" f: d0 x1 y% {- wscreen.width*0.6) {this.width=screen.width*0.6;this.alt='';this.onmouseover=this.style.cursor='pointer';this.onclick=function(){window.open('http://www.eask.tk/nat/001.jpg')}}" />+ u5 E4 M, y0 U" w
2.CISCO pix515e使用PDM3.0配置如下( a6 `" E( E5 F. C
screen.width*0.6) {this.width=screen.width*0.6;this.alt='';this.onmouseover=this.style.cursor='pointer';this.onclick=function(){window.open('http://www.eask.tk/nat/002.jpg')}}" />! j2 J: M5 t" g/ X$ t; u% R! A
screen.width*0.6) {this.width=screen.width*0.6;this.alt='';this.onmouseover=this.style.cursor='pointer';this.onclick=function(){window.open('http://www.eask.tk/nat/003.jpg')}}" />
( `+ ^. W' r( `+ Q$ N) d" A# B# u% o' u$ cscreen.width*0.6) {this.width=screen.width*0.6;this.alt='';this.onmouseover=this.style.cursor='pointer';this.onclick=function(){window.open('http://www.eask.tk/nat/004.jpg')}}" />
- H" K5 S; ^. e3 s; ~screen.width*0.6) {this.width=screen.width*0.6;this.alt='';this.onmouseover=this.style.cursor='pointer';this.onclick=function(){window.open('http://www.eask.tk/nat/005.jpg')}}" />
8 ^$ K( E# P5 ^) H6 A; v7 Sscreen.width*0.6) {this.width=screen.width*0.6;this.alt='';this.onmouseover=this.style.cursor='pointer';this.onclick=function(){window.open('http://www.eask.tk/nat/006.jpg')}}" />4 N, @+ O4 j6 W: z' v0 l" v, _
screen.width*0.6) {this.width=screen.width*0.6;this.alt='';this.onmouseover=this.style.cursor='pointer';this.onclick=function(){window.open('http://www.eask.tk/nat/007.jpg')}}" />
! e+ h5 Y3 n. U0 E" s! o' i2 _" e  _
3.拟实现的网络功能:公网计算机通过光纤、ADSL、WIFI、mobile等方式接入因特网,再通过windows自带的虚拟专用网拨号连接或者CISCO的VPN cilent拨入PIX515e内部的VpnServer,以实现接入VpnServer所在的局域网,共享局域网内的资源,VPN Server在内网测试通过。$ S  J0 K8 Z- y, b
; C8 c: _% K* W' E' T
4.遇到的问题:公网计算机无法通过pix515e的公网地址向内穿越NAT拨入VPNserver。能否在pix515e上建立一条Vpn Tunnel以实现第3条的网络功能,该如何建立。
9 C3 J% |& r8 u7 c" [8 S
9 j+ [) }" o- O+ B* H; |% _  u5.已失败的方法( |; g- k6 Z; T$ R  \) _0 g* q4 R' Y
, p- |$ j( u( L! ]+ t: f+ ]
A:端口映射,该思科设备通过NAT功能将内网IP转换为公网IP,不是路由器,无法做端口映射。
3 w5 j, A. @8 g; X$ I/ c  ^$ H
( e, e0 _; ^% N5 m$ W( jB:在PDM3.0上尝试对PIX515e进行VPN的设置,未能凑效。& F! r, y1 {* }; w( g+ B- W4 |

( r2 j* g' u& P, ~' SC:逆向NAT失败,PDM3.0不允许。2 C# o0 t) G. d7 W9 k' `, t
! \& J! k6 e$ C' ]# R: y4 q5 x
设备目前的配置列表) K. g# v  O  q0 j- u1 d/ `' s. i

* d+ d  K9 \" |6 D" q! qBuilding configuration...
# {0 K( o8 w- P# D: b- t: Saved
- [% e; p5 {( N% O$ I. P2 [:
8 o+ T! B$ O4 G# u# r9 ]* YPIX Version 6.3(3)
" ]) }2 F. {& B* Tinterface ethernet0 auto
% k) d' v! O2 t9 Ainterface ethernet1 auto& I0 C, j/ r) `% G+ ~% h) H
nameif ethernet0 outside security0
  F( _( _9 b- M6 F+ d$ Pnameif ethernet1 inside security100
4 ~& w" W$ n5 O* R  xenable password /NNcO2U/e4a3IAX3 encrypted: l' U: F) @! H  X1 L/ O
passwd 2KFQnbNIdI.2KYOU encrypted! F5 H* W- m/ W& x7 R
hostname huawei
4 E& x% M4 Z& L2 z" U! b. Fdomain-name huawei.com
! S8 ~4 t# G) B2 `0 ]2 C) D; g% Lfixup protocol dns maximum-length 512) T: o2 E+ i, E$ ^) y
fixup protocol ftp 21
; ~% c" ^6 O7 h$ `/ P& ofixup protocol h323 h225 1720, @8 s8 P  S' e5 U4 l1 T
fixup protocol h323 ras 1718-1719* K- O6 a; V: p+ i5 O* I8 W
fixup protocol http 807 O; k2 ~6 s0 R6 Z, x: A: T
fixup protocol rsh 514
2 _  \$ n! ^0 _fixup protocol rtsp 554
. i5 H. D" v4 H3 _% K; p( qfixup protocol sip 5060
' m7 ?; j+ i2 ?5 s5 dfixup protocol sip udp 5060# V- B  {/ F  f, B/ R
fixup protocol skinny 20007 f0 J) K0 Z9 N
fixup protocol smtp 25: V7 \# e/ Q" y' Z! `) I
fixup protocol sqlnet 1521: q- {2 x( D' _/ A; m# n8 K( }
fixup protocol tftp 69# }' v, J/ f: c
names
2 ]  i, x: W- paccess-list outside_inbound_nat0_acl permit ip interface outside 192.168.0.0 255.255.255.0
5 A. V9 P+ h5 @pager lines 24/ r2 o: D$ i; Z1 m$ |+ M9 C! D
mtu outside 15002 [) D, C( P0 {6 g1 }$ @% A5 s7 E9 M
mtu inside 1500- A" x. P% n# X9 N
ip address outside 221.XXX.138.250 255.255.255.252& f  c: w* ^, w& e! j
ip address inside 192.168.0.254 255.255.255.0
$ y) T( C: K2 P5 F; i# Z0 n4 o/ xip audit info action alarm; f0 J6 k( l# q8 D
ip audit attack action alarm; Z1 a+ M7 q) w! i  z
pdm location 192.168.0.3 255.255.255.255 inside
7 ?1 e0 @# x. [. e9 `8 tpdm location 192.168.0.24 255.255.255.255 inside! F0 p  p  l$ Z6 T3 K6 \2 l6 K
pdm location 192.168.0.1 255.255.255.255 inside
+ s( W6 I% O& f2 q0 Spdm location 192.168.0.2 255.255.255.255 inside/ \( O0 z# y2 Y1 E7 M
pdm location 192.168.0.12 255.255.255.255 inside
% Q6 u8 w9 e3 L) R: Kpdm location 192.168.0.10 255.255.255.255 inside
' |- s3 B2 y+ r+ Apdm location 192.168.0.16 255.255.255.255 inside
$ J# ^8 _5 z4 V) n: a/ H3 {4 e) wpdm location 192.168.0.19 255.255.255.255 inside
2 ~9 Z/ X4 Q- J# Lpdm location 192.168.0.20 255.255.255.255 inside3 K; @5 _: q8 }' }9 ?, W0 h! {- z
pdm location 192.168.0.22 255.255.255.255 inside
1 O( N; a! Q* N, \' x6 qpdm location 192.168.0.23 255.255.255.255 inside' W6 f9 r  R6 Z
pdm location 192.168.0.34 255.255.255.255 inside5 W+ M$ ]( K  a/ f0 L" R. F- Y
pdm location 192.168.0.38 255.255.255.255 inside* G. s0 w9 o  K# D: |3 X% k6 |$ V5 |
pdm location 192.168.0.40 255.255.255.255 inside
4 Z0 H; Z$ {& r0 O" i3 y& k; E( o. spdm location 192.168.0.58 255.255.255.255 inside$ X7 Q1 H/ ?1 Q3 r6 k/ P0 B+ D
pdm location 192.168.0.17 255.255.255.255 inside" F$ k$ r; y8 m4 Y
pdm location 192.168.0.39 255.255.255.255 inside
' G* O! w9 V. W6 J3 M9 t( Npdm location 192.168.0.41 255.255.255.255 inside
" M0 P' J8 ^# |. Ppdm location 192.168.0.13 255.255.255.255 inside
' o! A2 o' @: L" Q; Dpdm location 192.168.0.42 255.255.255.255 inside/ d4 C$ I6 S. t7 ]7 T$ L8 t
pdm location 192.168.0.45 255.255.255.255 inside
# g) ^- @$ t6 P2 a2 Y# _$ tpdm location 192.168.0.46 255.255.255.255 inside1 |4 h9 ~3 X5 q1 g
pdm location 192.168.0.47 255.255.255.255 inside
/ M) `9 E5 }4 u( F" J* [# epdm location 192.168.0.50 255.255.255.255 inside+ b2 Z9 Q) [+ V9 b- a; Q
pdm location 192.168.0.25 255.255.255.255 inside
( e3 ?& l9 Z5 D8 l2 q' ^6 k# Apdm location 192.168.0.4 255.255.255.255 inside
2 h3 `8 o* }# h3 W1 v) I% Ppdm location 192.168.0.6 255.255.255.255 inside
% V& t2 g& Z  B3 K% J0 O& N) Gpdm location 192.168.0.35 255.255.255.255 inside/ I% Y1 z9 W. \
pdm location 192.168.0.21 255.255.255.255 inside
8 J7 b9 |: U) g) K0 ^) L) dpdm location 192.168.0.200 255.255.255.255 inside
. w4 x8 V6 Z. v  r7 Hpdm location 192.168.0.48 255.255.255.255 inside
/ Q( N* D: F, i& c  {  f( Epdm location 192.168.0.60 255.255.255.255 inside" t$ W2 n1 s+ y; q! w
pdm location 192.168.0.51 255.255.255.255 inside
" h, M, e, H& \% F: \0 s0 Kpdm location 192.168.0.32 255.255.255.255 inside
2 u1 e. M9 n2 m; ~) L: mpdm location 192.168.0.18 255.255.255.255 inside2 R  p" L5 s* V& Q
pdm location 192.168.0.7 255.255.255.255 inside) i6 `7 S! Z7 S; G' V
pdm location 192.168.0.201 255.255.255.255 inside
9 `( F% x' @7 g' l, epdm location 192.168.0.36 255.255.255.255 inside9 c( g3 T. z: V
pdm location 192.168.0.100 255.255.255.255 inside
" P9 t4 |, \* x3 y" T# Lpdm location 192.168.0.5 255.255.255.255 inside; [8 C5 l, ]; b3 i
pdm location 192.168.0.202 255.255.255.255 inside
1 \0 s* L% U% O! ?pdm location 192.168.0.26 255.255.255.255 inside
) o- W, @8 J4 Qpdm location 192.168.0.203 255.255.255.255 inside+ l! o9 L" }# ?) W* z) C6 q  n4 m% C) m
pdm location 192.168.0.14 255.255.255.255 inside3 M7 o* \) J. M  B9 z
pdm location 192.168.0.204 255.255.255.255 inside) ^; ~5 |7 U0 b& l" b
pdm location 192.168.0.251 255.255.255.255 inside
0 N8 \4 j1 e* V, kpdm location 192.168.0.205 255.255.255.255 inside
5 p$ A& q3 e% ^5 b6 _2 N& t" Cpdm location 192.168.0.206 255.255.255.255 inside
: o' V( q9 C# R. \6 S) rpdm location 192.168.0.207 255.255.255.255 inside
+ g) t1 X6 `! a# ^( T/ |/ _4 Ypdm location 192.168.0.208 255.255.255.255 inside6 c8 {0 D8 S4 _
pdm location 192.168.0.209 255.255.255.255 inside
" x1 ?1 r( N# s3 e' e+ a& }  s% \pdm location 192.168.0.108 255.255.255.255 inside
' `7 e0 I& b: u0 L4 Cpdm location 192.168.0.31 255.255.255.255 inside
+ M; N- I1 n: A  O$ {' Jpdm location 192.168.0.30 255.255.255.255 inside; J7 w+ M, ^& p. a9 Q" k) U( Y0 `
pdm location 192.168.0.210 255.255.255.255 inside- g! {7 i7 u4 t$ p8 S
pdm location 192.168.0.8 255.255.255.255 inside/ R2 S2 S) W4 q2 Q
pdm location 192.168.0.11 255.255.255.255 inside
2 D% A7 A6 V7 _6 J+ Y4 Z8 L! Zpdm location 192.168.0.29 255.255.255.255 inside3 h2 t6 x% y' w/ y
pdm location 192.168.0.109 255.255.255.255 inside+ t8 H; b! S: n$ ^# ~, Q& [
pdm location 192.168.0.111 255.255.255.255 inside" v, U" |- |8 z* ^; A
pdm location 192.168.0.116 255.255.255.255 inside" }2 z" p" j/ D1 R0 `/ S
pdm location 192.168.0.113 255.255.255.255 inside# r% E; U; C6 Q! G0 o; {9 q" P5 E
pdm location 192.168.0.107 255.255.255.255 inside
( z- z( P0 a9 _) h6 Hpdm location 192.168.0.240 255.255.255.255 inside1 I4 B3 A$ e, I) o9 I& f
pdm location 192.168.0.241 255.255.255.255 inside
0 c! `+ F, R& O# S( P4 Z& H5 x; O% @pdm location 192.168.0.233 255.255.255.255 inside
) R. Z1 S* J0 M6 u) {* kpdm location 192.168.0.250 255.255.255.255 inside
( P0 h' |$ L" I; w& K7 N' y6 W& @& ^pdm location 192.168.0.252 255.255.255.255 inside" z/ ^+ q5 b) p# V+ B
pdm location 192.168.0.253 255.255.255.255 inside
# M$ e1 L* v  ?$ i' gpdm location 192.168.0.44 255.255.255.255 inside6 a! h) f, n+ T: I0 L
pdm location 192.168.0.242 255.255.255.255 inside- V. Y' D7 a4 F- p: M; N
pdm location 192.168.0.239 255.255.255.255 inside
6 J" e! {) N: A( hpdm location 192.168.0.27 255.255.255.255 inside
7 _2 O& P2 _- Z6 l) |pdm location 192.168.0.249 255.255.255.255 inside0 ?; @7 F& N8 m! [2 t; X- v+ x
pdm location 192.168.0.61 255.255.255.255 inside
/ }( [' R4 Q3 P* H/ j5 g' @6 [pdm location 192.168.0.62 255.255.255.255 inside/ H# L8 m9 S, {5 b! Q
pdm location 192.168.0.63 255.255.255.255 inside+ |) r. M+ B  K& h
pdm location 192.168.0.64 255.255.255.255 inside
( I$ H% c: z9 ~  cpdm location 192.168.0.68 255.255.255.255 inside, s  L" S$ t9 r6 N6 h
pdm location 192.168.0.211 255.255.255.255 inside6 I! U" ^- T. m: C4 \
pdm location 192.168.0.70 255.255.255.255 inside
3 B1 [& |- g3 P( Q# ^. \pdm location 192.168.0.65 255.255.255.255 inside
3 y/ K" G! b( z1 ?8 y/ Ppdm location 192.168.0.121 255.255.255.255 inside
" |* N# L! R, y2 |pdm location 192.168.0.247 255.255.255.255 inside
8 u3 k0 s1 f- c/ ^5 h2 S( bpdm location 192.168.0.37 255.255.255.255 inside5 U5 B/ S& y2 f
pdm location 192.168.0.73 255.255.255.255 inside* Q3 F; U7 g  k  B& q6 F
pdm location 192.168.0.112 255.255.255.255 inside) e4 `/ C/ ?& _7 y. s6 j7 b2 E
pdm location 192.168.0.57 255.255.255.255 inside9 Z2 }8 T8 T+ P4 ^# E
pdm location 192.168.0.99 255.255.255.255 inside6 b7 x! @+ _. B& F. p
pdm location 192.168.0.124 255.255.255.255 inside/ L3 @" `' d0 V1 D( J4 F, F
pdm location 192.168.0.52 255.255.255.255 inside
5 y- K) T; i7 z! |& s. Spdm location 192.168.0.118 255.255.255.255 inside
: h, C9 P! y! R, Lpdm location 192.168.0.122 255.255.255.255 inside3 b( u, J( A, c4 K! O
pdm location 192.168.0.49 255.255.255.255 inside; s2 B8 }2 X2 D# G
pdm location 192.168.0.55 255.255.255.255 inside% u+ `( o& @. D; i7 Z  d
pdm location 192.168.0.43 255.255.255.255 inside
; Z1 {( M) ^1 s0 [, ^0 n0 O$ }. Gpdm location 192.168.0.103 255.255.255.255 inside1 }% e+ P$ |* o8 s
pdm location 192.168.0.54 255.255.255.255 inside
6 j  d  ^0 y- c. ]: B# Updm location 192.168.0.243 255.255.255.255 inside
1 d5 }& d: N& P: D$ U0 f( tpdm location 192.168.0.244 255.255.255.255 inside
2 q: Y1 Q) |4 u$ {; c! I% u# r" hpdm location 192.168.0.230 255.255.255.255 inside7 z: a- i0 x1 `7 V4 A# e0 D! U* ]
pdm location 192.168.0.135 255.255.255.255 inside
3 q# _6 _, P" [pdm location 192.168.0.115 255.255.255.255 inside0 K7 P, {" u& a$ T8 G
pdm location 192.168.0.245 255.255.255.255 inside7 U- ^- O! n" Y
pdm location 192.168.0.238 255.255.255.255 inside* K! \1 a6 @, L# ~5 @6 ^& @( n
pdm location 192.168.0.237 255.255.255.255 inside0 M# f( ?/ [8 y5 f) ^0 ~
pdm location 192.168.0.231 255.255.255.255 inside: N0 s5 M/ L  R: F: `# u9 k6 Y2 [
pdm location 192.168.0.235 255.255.255.255 inside
: o  t- U& l- hpdm location 192.168.0.236 255.255.255.255 inside! L  P' D0 s- U- w+ e
pdm location 192.168.0.190 255.255.255.255 inside
/ [6 @# Y+ @; T" }pdm location 192.168.0.181 255.255.255.255 inside
7 \# B) c  h$ j+ o2 Spdm location 192.168.0.9 255.255.255.255 inside
/ u3 @4 ?( |1 }% apdm location 192.168.0.246 255.255.255.255 inside
$ Z: S. T! v9 Q! k: Xpdm location 192.168.0.59 255.255.255.255 inside
$ V& D8 w% ]; [' x6 t0 cpdm location 192.168.0.191 255.255.255.255 inside+ r6 u  ]; O$ A6 p( Y
pdm location 192.168.0.117 255.255.255.255 inside
" I4 K; _; g4 J0 Q  Dpdm location 192.168.0.171 255.255.255.255 inside
+ {3 L) t4 _# K# n8 T) Spdm location 192.168.0.53 255.255.255.255 inside
. [  `1 T8 o# ]* ~8 Bpdm location 192.168.0.130 255.255.255.255 inside
. }; r! Y" Y/ d1 G. x* dpdm location 192.168.0.91 255.255.255.255 inside* I8 o) t" y. A
pdm location 192.168.0.140 255.255.255.255 inside3 {  V" @4 K9 b6 q# ?% f( o
pdm location 192.168.0.220 255.255.255.255 inside
* q9 ^; ~: d7 qpdm location 192.168.0.119 255.255.255.255 inside* a) h& U3 C$ d, S3 D: [0 T+ i
pdm location 192.168.0.223 255.255.255.255 inside4 M4 Z4 R: t  K3 R. C( L
pdm location 192.168.0.106 255.255.255.255 inside; w9 ?- ~" }' p2 [5 T2 D, c
pdm location 192.168.0.123 255.255.255.255 inside
$ c5 J  b: ?# z! O3 l- @5 }8 r8 Qpdm location 192.168.0.67 255.255.255.255 inside
8 I& e* D, g6 D4 l) W9 T; D/ Cpdm location 192.168.0.219 255.255.255.255 inside% t$ Z( N. u- }5 r
pdm location 192.168.0.56 255.255.255.255 inside
' X: p( ~) N, u6 qpdm location 192.168.0.66 255.255.255.255 inside5 C/ Z$ @* i0 V8 i5 o3 {9 s3 Y. `( k
pdm location 192.168.0.76 255.255.255.255 inside4 W) C) t5 f5 ^' o$ j
pdm location 192.168.0.102 255.255.255.255 inside
$ k  P' P! A0 v3 q: g, Npdm location 192.168.0.170 255.255.255.255 inside
" B/ |# T* k1 R" I  [  lpdm location 192.168.0.172 255.255.255.255 inside
( m  J% R  `: `7 `: E- \; J2 i! rpdm location 192.168.0.173 255.255.255.255 inside. E/ F5 K2 s, s! w
pdm location 192.168.0.174 255.255.255.255 inside! x; U! m" j4 ?' i+ u8 X+ b, a2 l$ ]
pdm location 192.168.0.175 255.255.255.255 inside' N9 H0 {8 u  i% Q
pdm location 192.168.0.160 255.255.255.255 inside
0 K. s1 t  c! R1 W) y/ xpdm location 192.168.0.138 255.255.255.255 inside* h" @3 V6 r( w# G" x) a) M' j
pdm location 192.168.0.78 255.255.255.255 inside
6 K: L5 }0 G, d' _$ n& z9 r6 ]pdm location 192.168.0.69 255.255.255.255 inside, t, M6 W6 @' l* F
pdm location 192.168.0.221 255.255.255.255 inside
, N. X* [1 P- @% `! \9 _2 t3 ^8 ipdm location 192.168.0.110 255.255.255.255 inside; G% K6 }6 M5 h- ]( ?
pdm location 192.168.0.232 255.255.255.255 inside6 l$ a/ U) l; \7 _* d1 }3 T& c
pdm location 192.168.0.80 255.255.255.255 inside* C/ d5 m9 B, \$ A  b
pdm location 192.168.0.81 255.255.255.255 inside
0 e, R! ]: z; bpdm location 192.168.0.82 255.255.255.255 inside0 _& ^& w0 \/ _
pdm location 192.168.0.83 255.255.255.255 inside1 x' t1 n5 L# k9 a
pdm location 192.168.0.84 255.255.255.255 inside' U0 `9 c! Q! k+ X# X- N5 L, ~
pdm location 192.168.0.85 255.255.255.255 inside4 W( x' T% \5 {7 ^
pdm location 192.168.0.86 255.255.255.255 inside
* r/ m7 \7 ~5 i; L4 j' A5 Lpdm location 192.168.0.87 255.255.255.255 inside! n+ Q: u" i0 w* }+ }2 `
pdm location 192.168.0.88 255.255.255.255 inside
9 [0 \' `5 o! a2 C0 w2 V1 z% Wpdm location 192.168.0.89 255.255.255.255 inside3 l2 Y5 s0 L) h9 {! b7 `
pdm location 192.168.0.90 255.255.255.255 inside
1 V- Z" v# x9 I6 jpdm location 192.168.0.28 255.255.255.255 inside: ?" ]9 J/ J3 K- q9 r
pdm location 192.168.0.234 255.255.255.255 inside
; x) Z  \3 H0 S1 V/ jpdm location 192.168.0.222 255.255.255.255 inside
8 ?5 A. R8 _. U$ F# s+ Kpdm location 192.168.0.150 255.255.255.255 inside6 ^: m( s( C) {2 Y
pdm location 192.168.0.151 255.255.255.255 inside6 U9 C( Q# |; M- H+ P
pdm location 192.168.0.152 255.255.255.255 inside
" J3 ~, G4 Z" [pdm location 192.168.0.77 255.255.255.255 inside
% ~9 ]6 H$ Z% ~; q# apdm location 192.168.0.72 255.255.255.255 inside
" F7 a! x, G) F% T7 ^: }5 j3 Dpdm location 192.168.0.225 255.255.255.255 inside
; C& Z' c! i0 |  Jpdm location 192.168.0.161 255.255.255.255 inside
2 D" l- T9 u8 _6 e# y  lpdm location 192.168.0.92 255.255.255.255 inside3 ]- d$ {. g" |+ y5 m0 J1 _
pdm location 192.168.0.192 255.255.255.255 inside
- Y; v, p% p* v3 \) Epdm location 192.168.0.193 255.255.255.255 inside2 i/ _/ K3 ~3 _
pdm location 192.168.0.15 255.255.255.255 inside9 Z0 z; S' d. G- S, m
pdm location 192.168.0.33 255.255.255.255 inside
; x0 v' j% h, C: {9 Epdm location 192.168.0.79 255.255.255.255 inside) G1 `. y; }1 h
pdm location 192.168.0.93 255.255.255.255 inside
) s! X8 V. _( Npdm location 192.168.0.94 255.255.255.255 inside* M) t  l7 {2 P1 A7 ]
pdm location 192.168.0.95 255.255.255.255 inside$ o. I- w9 z8 R4 P8 W
pdm location 192.168.0.96 255.255.255.255 inside
) S8 O; m. }! B. H; f; |pdm location 192.168.0.97 255.255.255.255 inside
2 q; y6 i2 d% I; _2 v: r- Qpdm location 192.168.0.98 255.255.255.255 inside
, V& w1 K9 R, H: T) updm location 192.168.0.101 255.255.255.255 inside1 W8 c4 R$ x9 T/ {/ L  Y0 e9 [
pdm location 192.168.0.104 255.255.255.255 inside
3 b1 r6 v9 {( ^# v% i! wpdm location 221.XXX.138.250 255.255.255.255 inside6 L$ E. @; [6 u! l' X
pdm location 192.168.0.71 255.255.255.255 inside  m; f' T* [% R4 v0 z: ]
pdm location 192.168.0.185 255.255.255.255 inside& J  \. Y  U6 x1 p" A  G
pdm location 192.168.0.75 255.255.255.255 inside' n* r8 b( x, ^1 k8 |0 ?# \
pdm location 192.168.0.120 255.255.255.255 inside
$ M9 z- w! I' Bpdm location 192.168.0.212 255.255.255.255 inside
% Q3 L0 A' k% _2 x3 \" n( @% wpdm location 192.168.0.213 255.255.255.255 inside& D0 }. ?4 F* @* Z0 i
pdm location 192.168.0.214 255.255.255.255 inside" y) `" ~4 s- A/ j& p
pdm location 192.168.0.215 255.255.255.255 inside
( v6 V0 G# k: t' s8 `$ Kpdm location 192.168.0.128 255.255.255.192 outside
- f6 g  ^0 {6 d$ q- bpdm history enable3 ]: n( E% X4 R" J  B' ^
arp timeout 14400
9 |9 S! X0 K; i9 r1 v/ x% V6 _- ^global (outside) 10 interface
1 m8 n! V- _  p; L$ h. b1 H( R1 [, wnat (outside) 0 access-list outside_inbound_nat0_acl outside
5 I6 i% P5 p$ l* ?- }; N' w$ a% vnat (inside) 10 192.168.0.1 255.255.255.255 0 00 p4 g- E# ^5 e7 I( X
nat (inside) 10 192.168.0.3 255.255.255.255 0 0
' _5 s# B" a  @8 S, i6 y3 |nat (inside) 10 192.168.0.4 255.255.255.255 0 04 q! |& z- A  z) H- F$ ^+ }7 z
nat (inside) 10 192.168.0.5 255.255.255.255 0 0
; F9 p+ s* Q: \" onat (inside) 10 192.168.0.10 255.255.255.255 0 0
9 \. v, Q; s0 l/ p9 xnat (inside) 10 192.168.0.11 255.255.255.255 0 0- O/ D1 W( D  ]- r. k
nat (inside) 10 192.168.0.12 255.255.255.255 0 0
. N; k; T6 a7 [( d0 q5 o$ Knat (inside) 10 192.168.0.13 255.255.255.255 0 0
5 o% v. K6 r2 I% n4 ~  `; q- Onat (inside) 10 192.168.0.14 255.255.255.255 0 0) o& A7 r% k  ?; q
nat (inside) 10 192.168.0.15 255.255.255.255 0 07 F* a: s( v$ t
nat (inside) 10 192.168.0.16 255.255.255.255 0 05 g4 n* P' n5 t$ m4 N) M3 K" Q
nat (inside) 10 192.168.0.17 255.255.255.255 0 0
. P% |- W2 O5 T5 qnat (inside) 10 192.168.0.21 255.255.255.255 0 0
9 x4 }/ E, w7 ^9 ~8 d- u# H( Nnat (inside) 10 192.168.0.22 255.255.255.255 0 04 P; S  x/ v: u' y: K
nat (inside) 10 192.168.0.23 255.255.255.255 0 0! c8 F/ t+ v- }4 j4 B" T" X
nat (inside) 10 192.168.0.24 255.255.255.255 0 0# l- [# v3 y9 J9 Q
nat (inside) 10 192.168.0.25 255.255.255.255 0 0  @. F+ R9 B2 S0 c$ Y  m, o/ w2 W
nat (inside) 10 192.168.0.26 255.255.255.255 0 0
7 P5 o5 i/ F+ E' v. q4 _" Nnat (inside) 10 192.168.0.27 255.255.255.255 0 0
' w/ B' J$ H; D) Wnat (inside) 10 192.168.0.29 255.255.255.255 0 0; _% N$ h0 r. C8 [/ d
nat (inside) 10 192.168.0.31 255.255.255.255 0 0
6 {2 i- N1 M  s; |: Knat (inside) 10 192.168.0.32 255.255.255.255 0 09 \6 j! o: c6 }5 S$ N; p
nat (inside) 10 192.168.0.33 255.255.255.255 0 0. N& b: A" k3 t$ v1 k! I
nat (inside) 10 192.168.0.34 255.255.255.255 0 0
% ~+ a6 L" V; F6 q: onat (inside) 10 192.168.0.37 255.255.255.255 0 0
: \. h4 z* t4 Y+ Cnat (inside) 10 192.168.0.39 255.255.255.255 0 0
- X: o% T1 s) d) cnat (inside) 10 192.168.0.40 255.255.255.255 0 0
4 l1 ]3 T. p9 k; `$ f* v5 Znat (inside) 10 192.168.0.44 255.255.255.255 0 06 a. }- `' ~- o5 F
nat (inside) 10 192.168.0.45 255.255.255.255 0 09 d6 L6 p6 V1 a
nat (inside) 10 192.168.0.47 255.255.255.255 0 0
5 `. c& G8 D- }0 Tnat (inside) 10 192.168.0.48 255.255.255.255 0 0+ S1 l7 }6 b3 v$ K' Z
nat (inside) 10 192.168.0.49 255.255.255.255 0 0
: U" G' ~( {+ W- [# u% gnat (inside) 10 192.168.0.50 255.255.255.255 0 06 s5 G- n$ [4 [! f
nat (inside) 10 192.168.0.51 255.255.255.255 0 0' K4 W0 O0 v( x* d2 i' i' ~  Z
nat (inside) 10 192.168.0.52 255.255.255.255 0 0
& L: B$ H! i/ x% Inat (inside) 10 192.168.0.53 255.255.255.255 0 0
( a+ ?9 E- d3 }nat (inside) 10 192.168.0.54 255.255.255.255 0 0
: r9 `6 @# l! H4 R% k" Mnat (inside) 10 192.168.0.55 255.255.255.255 0 0" ?; d) F4 a( j; F
nat (inside) 10 192.168.0.56 255.255.255.255 0 0
" x  [5 D. m( e- L$ X. qnat (inside) 10 192.168.0.57 255.255.255.255 0 0. f0 m# R8 u9 C9 F5 \
nat (inside) 10 192.168.0.58 255.255.255.255 0 0
9 }" z8 f7 n+ znat (inside) 10 192.168.0.59 255.255.255.255 0 00 E. p" b2 I) n  e  V+ E$ y
nat (inside) 10 192.168.0.62 255.255.255.255 0 0% z& t" f' o/ S" t( I* \
nat (inside) 10 192.168.0.63 255.255.255.255 0 0/ j& t4 ~2 a9 }3 G
nat (inside) 10 192.168.0.64 255.255.255.255 0 08 P$ }$ g8 Y+ R. p5 z
nat (inside) 10 192.168.0.65 255.255.255.255 0 0
& C& I1 r/ _* l4 Fnat (inside) 10 192.168.0.66 255.255.255.255 0 0
7 u) a: m' k; O( T" Xnat (inside) 10 192.168.0.67 255.255.255.255 0 0
( o7 s5 i+ P( e1 i4 o3 a4 f  Gnat (inside) 10 192.168.0.68 255.255.255.255 0 0# i) A9 Y7 p7 q$ c9 T$ a% ]
nat (inside) 10 192.168.0.69 255.255.255.255 0 0
5 @; a, G8 w  x. x) Onat (inside) 10 192.168.0.71 255.255.255.255 0 0
) D( u' r. E& T2 Nnat (inside) 10 192.168.0.73 255.255.255.255 0 0
! Y, m4 Y  b/ f, x- Knat (inside) 10 192.168.0.76 255.255.255.255 0 09 i# b$ ]0 ^( q: a+ D& n6 C7 U
nat (inside) 10 192.168.0.79 255.255.255.255 0 0. m9 B  b0 a4 i  c8 j7 f. O
nat (inside) 10 192.168.0.80 255.255.255.255 0 0( j, R3 K+ U3 }3 ]$ H7 H
nat (inside) 10 192.168.0.81 255.255.255.255 0 0
* ~0 [$ {6 M/ I$ `! Knat (inside) 10 192.168.0.82 255.255.255.255 0 02 I  c; r# E& s6 w$ W
nat (inside) 10 192.168.0.83 255.255.255.255 0 08 s+ g* D9 u! {, ]! Z
nat (inside) 10 192.168.0.85 255.255.255.255 0 0) ^2 }$ m( A, K: ?9 p5 h- U, C
nat (inside) 10 192.168.0.86 255.255.255.255 0 0
1 l0 @7 x3 [! c0 d/ \7 ynat (inside) 10 192.168.0.87 255.255.255.255 0 06 Z, d- _# k$ a, M8 y# Q* g
nat (inside) 10 192.168.0.89 255.255.255.255 0 0' c# C% T9 G" O/ W6 Y% s+ K
nat (inside) 10 192.168.0.90 255.255.255.255 0 0/ x, E+ \9 {+ {( g( H' H. V
nat (inside) 10 192.168.0.92 255.255.255.255 0 0
% Y0 j3 h" L- O  X2 Dnat (inside) 10 192.168.0.93 255.255.255.255 0 08 z2 t' @' I8 p! ?. Q* E4 p. u
nat (inside) 10 192.168.0.94 255.255.255.255 0 0( ?$ C: |* f9 }/ x$ l& \
nat (inside) 10 192.168.0.95 255.255.255.255 0 05 r8 M1 s% a9 P- B% [
nat (inside) 10 192.168.0.96 255.255.255.255 0 0
1 r9 k+ L2 e+ B2 ^, x* r8 p1 Gnat (inside) 10 192.168.0.97 255.255.255.255 0 0
0 H6 V; B* x+ s- o. onat (inside) 10 192.168.0.99 255.255.255.255 0 0
' F# A# ?( J/ B+ j3 U5 \% }9 nnat (inside) 10 192.168.0.101 255.255.255.255 0 0
* P' v! \0 E' Lnat (inside) 10 192.168.0.102 255.255.255.255 0 0
  u* B! {1 }+ g7 ?2 w4 Xnat (inside) 10 192.168.0.103 255.255.255.255 0 06 h! u5 A  K  g( q1 k2 u* r
nat (inside) 10 192.168.0.104 255.255.255.255 0 0
4 F2 R6 ^0 O. X; o* x1 ]0 X6 knat (inside) 10 192.168.0.106 255.255.255.255 0 0
5 s( ]9 C  J( ]% lnat (inside) 10 192.168.0.107 255.255.255.255 0 0
6 S. N; T7 k+ N: t" i! _nat (inside) 10 192.168.0.108 255.255.255.255 0 0: L; z' t5 Y. b0 f7 Y6 W- r1 A  M
nat (inside) 10 192.168.0.118 255.255.255.255 0 0
1 ]+ B/ S: B- g' t: s, h( ^nat (inside) 10 192.168.0.119 255.255.255.255 0 0
9 K$ B0 f3 b/ ]8 D# X  Fnat (inside) 10 192.168.0.120 255.255.255.255 0 0
  V# Y6 p( u" Nnat (inside) 10 192.168.0.121 255.255.255.255 0 02 e5 Q( y6 m: m' H7 i6 _
nat (inside) 10 192.168.0.200 255.255.255.255 0 0
+ s- Q! B8 ^6 s8 }5 o2 ?nat (inside) 10 192.168.0.201 255.255.255.255 0 0% e4 {7 w) x& k
nat (inside) 10 192.168.0.202 255.255.255.255 0 0
5 u+ O$ c, `9 O; P& N* ?! jnat (inside) 10 192.168.0.203 255.255.255.255 0 0
( _$ o% ^$ P4 W3 @: {7 ]% Y6 dnat (inside) 10 192.168.0.204 255.255.255.255 0 09 {0 q# j  A0 c# b; O4 p5 n
nat (inside) 10 192.168.0.205 255.255.255.255 0 0
7 E% @0 D6 T; H5 \nat (inside) 10 192.168.0.206 255.255.255.255 0 07 f& P( t  Y" I0 l! P
nat (inside) 10 192.168.0.207 255.255.255.255 0 0- W$ m& t7 Q9 ^" E
nat (inside) 10 192.168.0.208 255.255.255.255 0 0* Y5 m  S! @  I
nat (inside) 10 192.168.0.209 255.255.255.255 0 0
7 l1 p6 V* I$ `) D3 K( ^! cnat (inside) 10 192.168.0.210 255.255.255.255 0 0) v: o/ [$ @; A# ~5 r8 I% e; Q& X
nat (inside) 10 192.168.0.211 255.255.255.255 0 0! A& ^' {: K$ q9 _' C8 E
nat (inside) 10 192.168.0.212 255.255.255.255 0 0
- v/ a5 q" D! Y0 P4 |- m& i0 xnat (inside) 10 192.168.0.213 255.255.255.255 0 0+ P+ W5 e1 B! K  [2 n  k, N$ v
nat (inside) 10 192.168.0.214 255.255.255.255 0 0) {* w+ w; i; ]( x( J/ q' t
nat (inside) 10 192.168.0.215 255.255.255.255 0 0+ R8 k) m% w4 w7 t( Z1 ]# q1 Z
nat (inside) 0 192.168.0.0 255.255.255.0 0 0: t. y3 q) ?3 _* Z7 o4 U' S
nat (inside) 10 0.0.0.0 0.0.0.0 0 0, j( [7 T1 a) j6 T" I
route outside 0.0.0.0 0.0.0.0 221.XXX.138.249 16 c1 Z/ C# a: J. [
timeout xlate 3:00:00
* @% A, y, D  V- ~3 i( w- ~timeout conn 1:00:00 half-closed 0:10:00 udp 0:02:00 rpc 0:10:00 h225 1:00:00# p/ P+ p  B8 H9 T
timeout h323 0:05:00 mgcp 0:05:00 sip 0:30:00 sip_media 0:02:00
3 z7 T3 E* r+ _" J* w3 gtimeout uauth 0:05:00 absolute1 F0 t: P( t2 C2 G% w
aaa-server TACACS+ protocol tacacs+
0 @. R' Z, @5 w2 P, H6 i4 {aaa-server RADIUS protocol radius - g2 S/ `. ]4 \9 L# d$ V
aaa-server LOCAL protocol local
- x9 C3 X( T2 m8 jhttp server enable% |! b# j% D: g5 C. s  q7 P( \- m
http 192.168.0.0 255.255.255.0 inside
- G6 ^. {  `7 ^) nno snmp-server location
. B! c' W, T1 [no snmp-server contact
& F: W, l6 b" J2 H5 ssnmp-server community public% j- w, G3 w/ K& m. [5 p& x
no snmp-server enable traps
! C  f0 `8 _& ~3 E, C  ]floodguard enable; f& d9 y5 H0 y4 D$ T/ T" @% U
sysopt connection permit-ipsec
4 m1 C" N9 a$ u8 \8 I! K/ K" xsysopt connection permit-l2tp
6 E+ j5 f! W; T( vcrypto ipsec transform-set ESP-DES-SHA esp-des esp-sha-hmac
5 N* i% c% a7 a6 e# [! G( _crypto ipsec transform-set ESP-DES-MD5 esp-des esp-md5-hmac 3 P& k7 g  m0 C) x* E4 q' X
isakmp enable outside
# ~  K  M6 {- g6 r. C" {isakmp enable inside0 f0 T/ j1 Y  c
telnet timeout 5+ x* z2 O* i0 t6 `' E2 h' t
ssh 0.0.0.0 0.0.0.0 outside9 ~- Q# o( v& y% ^
ssh 0.0.0.0 0.0.0.0 inside  F' L" _( z  V/ ?
ssh timeout 50 }# y  a  _4 J0 B2 q; W
console timeout 0+ |& ]  l4 p" ]8 ?% M! C
vpdn username wanhine password *********
1 Y3 N; L! k! g# ^vpdn enable outside
" `3 l! R1 D4 V5 `vpdn enable inside
* ]4 o7 t1 b# Vdhcpd address 192.168.0.20-192.168.0.200 inside
2 _9 X( S. s* K9 a+ v  j5 Qdhcpd dns 202.103.24.68 202.103.0.117& n0 e. N1 w/ m
dhcpd lease 3600, p$ l" n4 ~. N; ?: I
dhcpd ping_timeout 7503 S! O( k. I) ^/ D# q6 ~: R
terminal width 801 N, x9 `& x, H9 [' w# K
Cryptochecksum:f40dc8963b7f456d60eac467e8c0ea872 n2 f; g- u- t- L
: end
% l! S4 x' P8 A: Z[OK]9 \7 _5 f9 z5 P" B; A: Y
7 Q% T7 ~" m9 x6 y0 n. y9 g

1 j! o7 K* ]: i+ A/ E% c
1 V. _, d5 g# B0 ?. n0 z请高人指点.2 S% s% }. Y  T- Q
如果PDM无法实现,请发下完整的配置表谢谢,万分感谢!
回复 支持 反对

举报

fondafo [Lv8 技术精悍] 发表于 2013-10-8 09:05:52 | 显示全部楼层
真是 收益 匪浅
回复 支持 反对

举报

tlq888 [VIP@钻石] 发表于 2013-10-8 14:56:55 | 显示全部楼层
好好 学习了 确实不错
回复 支持 反对

举报

jyb75820400 [Lv8 技术精悍] 发表于 2013-10-18 09:47:48 | 显示全部楼层
过来看看的,感谢攻城狮论坛
回复 支持 反对

举报

roc8788 [Lv8 技术精悍] 发表于 2013-10-21 18:16:13 | 显示全部楼层
我是个凑数的。。。
回复 支持 反对

举报

zlm888 [Lv8 技术精悍] 发表于 2013-10-21 21:18:44 | 显示全部楼层
回复 支持 反对

举报

w10 [Lv8 技术精悍] 发表于 2013-10-24 21:45:30 | 显示全部楼层
谢谢楼主,共同发展
回复 支持 反对

举报

时光后 [Lv8 技术精悍] 发表于 2013-10-25 09:29:59 | 显示全部楼层
谢谢楼主,共同发展
回复 支持 反对

举报

我啊 [VIP@钻石] 发表于 2013-10-25 10:21:47 | 显示全部楼层
学习了,谢谢分享、、、
回复 支持 反对

举报

您需要登录后才可以回帖 登录 | 立即注册

本版积分规则

QQ|无图浏览|手机版|网站地图|攻城狮论坛

GMT+8, 2025-7-8 09:07 , Processed in 0.132695 second(s), 16 queries , Gzip On, MemCache On.

Powered by Discuz! X3.4 © 2001-2013 Comsenz Inc.

Designed by ARTERY.cn