pix515e(config)# sh run( q4 Y) R% \1 x7 U( \1 ?% [$ u
: Saved! K" w8 ]) z/ e/ w+ u
:: s6 }6 y- T# I4 I* y. O
PIX Version 7.2(2)
1 V1 e+ v+ w' D k- l; D!
, I8 E* ` Y" U* Ahostname pix515e
, _2 M6 Z* s& D5 Z! i7 e+ Cenable password HvvKgg35CIMoYZhL encrypted+ k& k: \! g7 c' x8 H
names' Q, r, [7 g$ a" a q) m) W. k7 J
!
; I6 T1 P/ o% ^# J+ dinterface Ethernet05 o5 V; A0 U# |# F i% L
nameif outside
' G7 k& ?/ B% v# g, G, a security-level 0
0 v5 m5 ~; `+ v/ K6 X) ? ip address *.*.*.* 255.255.255.240 / A$ `0 j9 @" K- l9 @" |
!- v$ @. g1 D" G
interface Ethernet1
' |* ~( O+ h: H nameif inside- ?' B( G1 c" A. E/ O; ]
security-level 100
* _# s6 }. }, |& K" X% _) K2 k ip address 192.168.1.1 255.255.255.0
3 P5 m4 z: M* J!
+ `! `& L1 }8 S: i1 c! Cpasswd HvvKgg35CIMoYZhL encrypted3 `( h! K, Y x+ W
ftp mode passive
. r% a; U f/ Hpager lines 24; E$ U7 O1 x' O8 i5 `5 T# V. R
mtu outside 1500' i3 i1 x) O! A
mtu inside 1500
: F6 @$ |2 Q p1 u( ?no failover5 G8 S5 e, d, N/ o
icmp unreachable rate-limit 1 burst-size 1
; C- U( S, d! B/ A8 gno asdm history enable
& ~# T" Z) N. n; C, ~arp timeout 14400
( M) |9 T! \3 w o( e4 `******************************************7 u& D3 f) W; b; [# `
代理上网设置。
0 q/ m7 x0 n; `3 q- |* Z) S4 tglobal (outside) 1 interface
& j( l. ^( V0 m9 q- X& knat (inside) 1 192.168.1.0 255.255.255.0
) l, J/ w2 `! P. z% T. K: Troute outside 0.0.0.0 0.0.0.0 *.*.*.* 1
) Q: c5 ~6 ], m0 S K$ V& [6 h******************************************. S4 V' A& ]+ q. l! L1 n
timeout xlate 3:00:00, w8 e; [% x0 y; C; v
timeout conn 1:00:00 half-closed 0:10:00 udp 0:02:00 icmp 0:00:02
) i. K+ f/ `9 P% Jtimeout sunrpc 0:10:00 h323 0:05:00 h225 1:00:00 mgcp 0:05:00 mgcp-pat 0:05:00
, [! _9 y k1 A- Y2 htimeout sip 0:30:00 sip_media 0:02:00 sip-invite 0:03:00 sip-disconnect 0:02:00* }) V0 g7 M1 M% V" I* }
timeout uauth 0:05:00 absolute* r: ], A- G" V: t5 ~
no snmp-server location
4 I; d2 m S' qno snmp-server contact4 o1 a( s, }7 J1 N
snmp-server enable traps snmp authentication linkup linkdown coldstart
% T3 i7 i2 t5 y4 f' b' h% ^! V5 P******************************************
8 s. Z0 A( U7 a& x' K$ Q' m: ]0 e: m允许内网telnet防火墙。
% c7 V6 M( f( ~7 Z2 ntelnet 192.168.1.0 255.255.255.0 inside
2 T$ Y! Y z' O2 Z8 ~******************************************
6 h5 V1 a, u9 K2 f5 xtelnet timeout 5
! y0 v( E* o; |/ @ssh timeout 59 v$ ?4 s P% E6 R9 G, o$ E$ m
console timeout 0
. ?8 y3 ]: H- |/ r! Z+ M!$ X/ E. k3 z+ x" P9 {1 [5 c
class-map inspection_default3 q! `5 j2 X: q. S) j- O5 ~" u
match default-inspection-traffic+ Y# W( N) X* R1 {
!1 H p. C7 |: _3 D( ?
! ' j( l" ~4 N$ u# L8 D, U
policy-map type inspect dns preset_dns_map
+ A7 x0 G, I8 T! C parameters% S t: _4 U7 o& o# K( s/ J) y2 M
message-length maximum 512
& g0 M5 [/ d# o7 z) bpolicy-map global_policy
2 z. V( O0 I! g) P5 w8 h class inspection_default
3 o: X2 k3 `& K6 z; t1 Z inspect dns preset_dns_map % p& E( d: s# _/ n
inspect ftp
* w+ h! d/ D, K- ^# h inspect h323 h225
. x8 J5 H# f$ D! I+ e* _* R$ e r7 A inspect h323 ras
2 }. _- n$ p m$ @( Q inspect rsh & I' r4 k& w( } A
inspect rtsp % V/ R6 {2 ] r4 t1 e. }% @
inspect esmtp ; t/ }4 D8 D. L# @, F/ |5 U
inspect sqlnet # W( w8 [' C5 J
inspect skinny ; T0 M% U1 s% `/ W
inspect sunrpc : D. ~& Q o6 q
inspect xdmcp
0 ?, |5 ]7 g, m) k4 X+ J inspect sip
/ w% n' w- ^8 l: @. H inspect netbios 9 ] O I: U" N1 ?
inspect tftp
) S5 |1 r9 n+ _; q" b, P!7 H- {% K/ ?1 C8 _ `! j, U
service-policy global_policy global) f) ?) j) ?3 t3 H! u3 [% u6 M
prompt hostname context
: s7 Y ]. ^; l0 ]Cryptochecksum:38b76b638***c09ef23cc0e73c98b58b# Q/ Z" M; F. x1 m& N; g
: end |