CISCO - ASA5510 - 防火墙配置手册(2)

interface Ethernet0/0 nameif outside security-level 0

ip address 219.139.*.* 255.255.255.0 !

interface Ethernet0/1 nameif inside security-level 100

ip address 192.168.10.1 255.255.255.0 !

interface Ethernet0/2 shutdown no nameif no security-level no ip address !

interface Ethernet0/3 shutdown no nameif no security-level no ip address !

interface Management0/0 shutdown

nameif management security-level 100

ip address 192.168.1.1 255.255.255.0 management-only !

ftp mode passive

same-security-traffic permit inter-interface

access-list 100 extended permit tcp any host 219.139.*.* eq www access-list 100 extended permit tcp any host 219.139.*.* eq 81 access-list 100 extended permit tcp any host 219.139.*.* eq 88 access-list 100 extended permit tcp any host 219.139.*.* eq 230 access-list 100 extended permit tcp any host 219.139.*.* eq 8888 access-list 100 extended permit tcp any host 219.139.*.* eq 85 access-list 100 extended permit tcp any host 219.139.*.* eq 6060 access-list 100 extended permit tcp any host 219.139.*.* eq 5070 access-list 100 extended permit tcp any host 219.139.*.* eq 6080 access-list 100 extended permit tcp any host 219.139.*.* eq 10000 access-list 100 extended permit tcp any host 219.139.*.* eq 231 access-list 100 extended permit tcp any host 219.139.*.* eq 1433 access-list 100 extended permit tcp any host 219.139.*.* eq 9000 access-list 100 extended permit tcp any host 219.139.*.* eq 84 access-list 100 extended permit tcp any host 219.139.*.* eq 10020 access-list 100 extended permit tcp any host 219.139.*.* eq 10040 access-list 100 extended permit tcp any host 219.139.*.* eq 87 access-list 100 extended permit tcp any host 219.139.*.* eq 10101 access-list 100 extended permit udp any host 219.139.*.* eq 3200 access-list 100 extended permit tcp any host 219.139.*.* eq 86 access-list 100 extended permit tcp any host 219.139.*.* eq 9999 access-list 100 extended permit tcp any host 219.139.*.* eq sip access-list 100 extended permit tcp any host 219.139.*.* eq 5080 access-list 100 extended permit tcp any host 219.139.*.* eq 10100 access-list 100 extended permit udp any host 219.139.*.* eq 3201 access-list 100 extended permit tcp any host 219.139.*.* eq 3389 access-list 100 extended permit tcp any host 219.139.*.* eq ftp access-list 100 extended permit tcp any host 219.139.*.* eq 8080 access-list 100 extended permit tcp any host 219.139.*.* eq 82

access-list 100 extended permit tcp any host 219.139.*.* eq 83 access-list 100 extended permit tcp any host 219.139.*.* eq 16000 access-list 100 extended permit tcp any host 219.139.*.* eq 15000 access-list 100 extended permit tcp any host 219.139.*.* eq 8088 access-list 100 extended permit tcp any host 219.139.*.* eq 211 access-list 100 extended permit tcp any host 219.139.*.* eq 9099 access-list 100 extended permit tcp any host 219.139.*.* eq 8000 access-list 100 extended permit tcp any host 219.139.*.* eq 7777 access-list 100 extended permit udp any host 219.139.*.* eq 6661 access-list 100 extended permit tcp any host 219.139.*.* eq 8500 access-list 100 extended permit tcp any host 219.139.*.* eq 8600 access-list 100 extended permit udp any host 219.139.*.* eq 3100 access-list 100 extended permit tcp any host 219.139.*.* eq 8081 access-list 110 extended permit ip 192.168.3.0 255.255.255.0 any access-list 110 extended permit ip 192.168.4.0 255.255.255.0 any access-list 110 extended permit ip 192.168.5.0 255.255.255.0 any access-list 110 extended permit ip 192.168.6.0 255.255.255.0 any access-list 110 extended permit ip 192.168.7.0 255.255.255.0 any access-list 110 extended permit ip 192.168.8.0 255.255.255.0 any access-list 110 extended permit ip 192.168.10.0 255.255.255.0 any access-list 110 extended permit ip 192.168.11.0 255.255.255.0 any access-list 110 extended permit ip 192.168.21.0 255.255.255.0 any access-list 110 extended permit ip 192.168.31.0 255.255.255.0 any access-list 110 extended permit ip 192.168.41.0 255.255.255.0 any access-list 110 extended permit ip 192.168.51.0 255.255.255.0 any access-list 110 extended permit ip 192.168.61.0 255.255.255.0 any access-list 110 extended permit ip 192.168.71.0 255.255.255.0 any access-list 110 extended permit ip 192.168.100.0 255.255.255.0 any access-list 110 extended permit ip 192.168.16.0 255.255.255.0 any access-list 110 extended permit ip 192.168.9.0 255.255.255.0 any

access-list acl_insde extended permit ip any any access-list 10 standard permit any access-list 200 extended permit ip any any

access-list 120 extended permit ip any host 219.139.*.* pager lines 24

logging asdm informational mtu outside 1500 mtu inside 1500 mtu management 1500

icmp unreachable rate-limit 1 burst-size 1 asdm image disk0:/asdm-621.bin no asdm history enable arp timeout 14400 nat-control

global (outside) 1 interface

nat (inside) 1 192.168.100.0 255.255.255.0 nat (inside) 1 0.0.0.0 0.0.0.0

static (inside,outside) tcp interface 81 192.168.16.247 81 netmask 255.255.255.255

static (inside,outside) tcp interface 88 192.168.16.249 88 netmask 255.255.255.255

static (inside,outside) tcp interface 230 192.168.16.250 230 netmask 255.255.255.255

static (inside,outside) tcp interface 8888 192.168.16.247 8888 netmask 255.255.255.255

static (inside,outside) tcp interface 85 192.168.16.250 85 netmask 255.255.255.255

static (inside,outside) tcp interface 6060 192.168.16.223 6060 netmask 255.255.255.255

static (inside,outside) tcp interface 5070 192.168.16.223 5070 netmask

255.255.255.255

static (inside,outside) tcp interface 6080 192.168.16.223 6080 netmask 255.255.255.255

static (inside,outside) tcp interface 10000 192.168.16.247 10000 netmask 255.255.255.255

static (inside,outside) tcp inte …… 此处隐藏：4741字，全部文档内容请下载后查看。喜欢就下载吧 ……