ASA 5505 dm to inside单边流量无法过去反之可以，底安全级别到高安全级别无法过去。
5 t1 U/ }4 ]6 {! l; t我配置1 o2 N& b$ }# t3 m$ l& x4 M- c1 E4 u
) }1 L w/ r" E$ H$ t; t" ?( ?interface Vlan1
0 f/ J7 ^# J4 J$ d6 P nameif outside+ M8 S8 ?9 f( i' ~
security-level 00 |, W. C9 d/ J$ h: J ?8 V5 c
ip address pppoe setroute / |9 ~) s) p. u- z
!
1 M/ D' |2 e. ^- d) pinterface Vlan10! X. E" A. L/ T4 {4 G9 b
nameif inside. s2 j- f9 K* @6 x
security-level 100/ }: k1 q$ r9 o3 H( ]
ip address 10.86.206.1 255.255.255.240 : f4 Q- f, ^8 ?. v; q" a
!
/ ]% R% C4 y* [( xinterface Vlan20( n! t) u" _3 F
nameif dmz) n2 l: `9 o' F) }# S& a1 `, ?: D5 B
security-level 50
: Z9 u8 I. a3 T+ ^" O; P1 T ip address 192.168.2.1 255.255.255.0
' z' L D& Y, d' o8 @. S!! M- S7 I8 r5 }3 M
interface Vlan30. j' r7 }1 |9 t, @" O* r
nameif ADSL
$ t" V& U6 d9 G4 k: z% o3 b* ~) j security-level 100
% V4 s8 n$ y6 h1 o ip address 192.168.1.1 255.255.255.0
9 B) {: n# \/ p6 N) u0 B7 e* p* j: L; I( Z
access-group 1 in interface outside2 O9 g2 |# ^( v
access-group whitelist in interface inside T3 Z( W z6 A1 B5 H
access-group dmz_inside in interface dmz2 H& Q2 o% T+ S
access-group adsl in interface ADSL0 g$ B7 v) O1 m$ b7 x9 Y5 {
4 D, W9 d$ T: {7 T' t
access-list 1 extended permit tcp any interface outside eq www
, ?& U1 Z8 F! ?7 J+ Xaccess-list 1 extended permit tcp any interface outside eq 3389 & U* F* ~4 M p" X) X& j# n- }
access-list 1 extended permit icmp any any
; M) V' }' ] g- Maccess-list 1 extended permit tcp any interface outside eq 8080 8 ]0 V" ?/ r0 `2 _2 P9 K* { ]
access-list 1 extended permit ip any any 5 L# p1 ~ e! B! ]9 ?7 L& w Q
access-list whitelist extended permit ip object-group whitelist any % g+ W! m4 F1 l$ j l0 G6 J4 f
access-list whitelist extended deny ip any any ' @7 j, i4 l5 o4 V; ~
access-list dmz_inside extended permit icmp any any
) d. t, G& M3 ]access-list dmz_inside extended permit ip any any 4 N0 x4 D: U0 o9 @
access-list adsl extended permit icmp any any ; z6 e. c* g! Z
access-list adsl extended permit ip any any
D9 |9 b2 Y8 d# P5 S9 Q; X$ Raccess-list nat0 extended permit ip 10.86.206.0 255.255.255.240 10.0.0.0 255.0.0.0
: b" j9 M' A+ v+ g7 }, Uaccess-list nat0 extended permit ip 10.86.206.0 255.255.255.240 172.16.0.0 255.240.0.0 ' x% x% W; m5 {5 D9 T: R* \
access-list outside_cryptomap extended permit ip 10.86.206.0 255.255.255.240 10.0.0.0 255.0.0.0
( D2 i# y" U7 g3 j* o5 ~( X; Jaccess-list outside_cryptomap extended permit ip 10.86.206.0 255.255.255.240 172.16.0.0 255.240.0.0 C0 W f% R* H
access-list nonat extended permit ip any any 9 W/ ` h2 }5 e0 b8 Y0 m$ _, k1 B
|
|
所有IT类厂商认证考试题库下载
【新盟教育】2023最新华为HCIA全套视频合集【网工基础全覆盖】---国sir公开课合集
【新盟教育】网工小白必看的！2023最新版华为认证HCIA Datacom零基础全套实战课
原创_超融合自动化运维工具cvTools
重量级~~30多套JAVA就业班全套 视频教程（请尽快下载，链接失效后不补）
链接已失效【超过几百G】EVE 国内和国外镜像 全有了 百度群分享
某linux大佬，积累多年的电子书(约300本)
乾颐堂现任明教教主Python完整版
乾颐堂 教主技术进化论 2018-2019年 最新31-50期合集视频（各种最新技术杂谈视频）
Python学习视频 0起点视频 入门到项目实战篇 Python3.5.2视频教程 共847集 能学102天
约21套Python视频合集 核心基础视频教程（共310G,已压缩）
最新20180811录制 IT爱好者-清风羽毛 - 网络安全IPSec VPN实验指南视频教程
最新20180807录制EVE开机自启动虚拟路由器并桥接物理网卡充当思科路由器
