pix515e(config)# sh run9 F. ^5 J2 ?$ Q: b0 f m
: Saved
! K: M; |2 }7 B' X5 c$ L:( A. V$ }( t' `+ S7 t. i* ?$ |
PIX Version 7.2(2) 0 ?# ?; c6 g/ P) s/ u( ]
!
Y" C2 k: R" e( a# q6 w/ ohostname pix515e |( H# t4 _7 ]) `& N! Q- `1 h
enable password HvvKgg35CIMoYZhL encrypted
' W$ x, {0 K$ Z$ U: Knames
& [4 [( i' ^' N5 d* |7 F+ I!0 b6 M4 u' l& t# c
interface Ethernet0: K( G" o6 i" @/ R9 z
nameif outside, O( {3 P/ m4 N0 b
security-level 08 i" R: j6 \! t' A7 v9 b3 A) N% j( j" x2 v
ip address *.*.*.* 255.255.255.240
' A+ Q1 N7 b, m+ K U8 N( [6 y!& @# `; L9 [# D, Y( s
interface Ethernet1
2 b; w, ~4 r, b" _/ d- M: x nameif inside
: w. @6 Y( c; [! O1 _ security-level 1004 g, F# X! E8 f6 ~% _& ]! Q) A
ip address 192.168.1.1 255.255.255.0
" l' Z5 h+ t* m' V/ v!- B% \) x4 E) E q
passwd HvvKgg35CIMoYZhL encrypted. N# v2 }) c' v5 f
ftp mode passive4 d; S( X6 z/ T9 j. \/ s& k
pager lines 24
J' n) r! F& u! {- f0 i) K amtu outside 1500
& K, ^ j0 ]6 k- D! r6 E: Nmtu inside 1500
{& G6 G, D" Ino failover5 s; Z, r9 p+ n/ T5 s. P
icmp unreachable rate-limit 1 burst-size 1
8 S/ a6 Q- a: \8 x _$ ~+ l n8 gno asdm history enable& g& e' e1 Q- Z2 ~6 R" @
arp timeout 144001 s& u- E! l4 F1 C
******************************************8 I6 b+ ?6 ?; h" w4 P" T* t
代理上网设置。
0 B& X5 M' Z% Rglobal (outside) 1 interface# e- u0 i0 d: g* x6 v) w/ R
nat (inside) 1 192.168.1.0 255.255.255.0: a, v+ T; P- n1 z7 S7 y) i
route outside 0.0.0.0 0.0.0.0 *.*.*.* 1; L X7 v* A; N. u/ q6 I6 H4 q: J
******************************************5 v0 Z. O% u9 J6 n! j R
timeout xlate 3:00:00$ Y; E. O0 G: z& y
timeout conn 1:00:00 half-closed 0:10:00 udp 0:02:00 icmp 0:00:02
& j, U7 c' c. F1 C% ~: htimeout sunrpc 0:10:00 h323 0:05:00 h225 1:00:00 mgcp 0:05:00 mgcp-pat 0:05:002 M/ v; @ C4 `" C: J
timeout sip 0:30:00 sip_media 0:02:00 sip-invite 0:03:00 sip-disconnect 0:02:00
/ U M0 P! L+ f. n2 Jtimeout uauth 0:05:00 absolute
: b' }7 h; t1 I9 B& g: ^" Tno snmp-server location$ @- @' q0 t7 @: [
no snmp-server contact
: c. p6 s7 x: \% Usnmp-server enable traps snmp authentication linkup linkdown coldstart
" ?) w$ _3 G" q( S. p******************************************
9 h8 _& U/ ^; h1 S1 i; k允许内网telnet防火墙。( Q8 C `! C5 l" Z0 Y, Q
telnet 192.168.1.0 255.255.255.0 inside4 E! s. j/ n) d+ k' h
******************************************2 y3 c$ `3 U0 V5 b/ c
telnet timeout 5
* O R8 _4 L0 X. Mssh timeout 5$ b3 l: g( r q( v% F8 V" }; C! W/ ?
console timeout 0, k! I" H# ~/ S6 d( k; A5 m* @- g4 T
!, ?- e7 W# \$ L) _8 [; E
class-map inspection_default
5 S7 q! Z' J1 k* |! U+ f# I0 s match default-inspection-traffic
I. C: ]( r- c$ i% ^3 j!& h, g. t) U/ m: r8 M7 Q
!
& u9 F0 ?" s" u! a$ g9 B. x2 dpolicy-map type inspect dns preset_dns_map" _" o/ d) r y
parameters
2 b6 b$ J! X" i3 K( ?; r message-length maximum 512% I1 w0 t3 t/ R& \* X+ u' k
policy-map global_policy2 Y+ ^" I+ I+ u; ]
class inspection_default
5 T; Y3 |( w6 |/ D; h } inspect dns preset_dns_map
# T& t2 Q% T0 l) r( Y! h inspect ftp
4 x, c( f% I8 E6 x7 F4 v+ m/ H inspect h323 h225 - x. g: P6 r3 L& I8 K5 |$ }
inspect h323 ras 9 y. g3 O; r& i1 q; L
inspect rsh * v+ N: i7 P1 T
inspect rtsp & f! A8 G4 g( `* G+ K3 Y. ~8 Z
inspect esmtp
, R6 H. [1 P8 l0 `. n inspect sqlnet
- S* `" G8 s4 c8 S inspect skinny
4 V9 [* m4 `* m2 ` inspect sunrpc
' P5 m4 v3 m# N. S inspect xdmcp 1 G9 H; o6 W$ H" e# F) E6 e
inspect sip
; G5 R! h$ x6 `: k1 S inspect netbios 7 m- {! @' s: a% W* p
inspect tftp 6 _: A7 A$ ~& e% j: F
!
8 H- x, Y8 b& X2 rservice-policy global_policy global' G. a) B: O( I2 u. {
prompt hostname context # h( _4 H) x6 X0 d$ _$ i" P3 D
Cryptochecksum:38b76b638***c09ef23cc0e73c98b58b; m8 J, g0 |$ l* j1 e
: end |