資源描述:
《Cisco FWSM防火墻透明模式配置例子》由會(huì)員上傳分享,免費(fèi)在線閱讀,更多相關(guān)內(nèi)容在行業(yè)資料-天天文庫(kù)。
1、CiscoFWSM防火墻透明模式配置例子透明模式配置例子以下內(nèi)容需要回復(fù)才能看到hostnameFarscapepasswordpassw0rdenablepasswordchr1cht0ninterfacevlan4interfacevlan5interfacevlan6interfacevlan7interfacevlan150interfacevlan151interfacevlan152interfacevlan153admin-contextadmincontextadminallocate-interfacevlan150allocate-interfacevlan4co
2、nfig-urldisk://admin.cfgmemberdefaultcontextcustomerAdescriptionThisisthecontextforcustomerAallocate-interfacevlan151allocate-interfacevlan5config-urldisk://contexta.cfgmembergoldcontextcustomerBdescriptionThisisthecontextforcustomerBallocate-interfacevlan152allocate-interfacevlan6config-urldis
3、k://contextb.cfgmembersilvercontextcustomerCdescriptionThisisthecontextforcustomerCallocate-interfacevlan153allocate-interfacevlan7config-urldisk://contextc.cfgmemberbronzeChangetocontextadminfirewalltransparentpasswdsecret1969enablepasswordh1andl0interfacevlan150??nameifoutside??security-level
4、0??bridge-group1interfacevlan4??nameifinside??security-level100??bridge-group1interfacebvi1??ipaddress10.1.1.1255.255.255.0routeoutside0010.1.1.21ssh10.1.1.75255.255.255.255insidearpoutside10.1.1.20009.7cbe.2100arpinside10.1.1.30009.7cbe.1000arp-inspectioninsideenablefloodarp-inspectionoutsidee
5、nablefloodaccess-listINTERNETremark-Allowsallinsidehoststoaccesstheoutsideaccess-listINTERNETextendedpermitipanyanyaccess-groupINTERNETininterfaceinsideaccess-listRETURNremark-AllowsOSPFbackaccess-listRETURNextendedpermit89anyanyaccess-listRETURNremark-AllowsDHCPbackaccess-listRETURNextendedper
6、mitudpanyanyeq68access-groupRETURNininterfaceoutsideChangetocontextafirewalltransparentpasswdhell0!enablepasswordenter55interfacevlan151??nameifoutside??security-level0??bridge-group45interfacevlan5??nameifinside??security-level100??bridge-group45interfacebvi45??ipaddress10.1.2.1255.255.255.0ro
7、uteoutside0010.1.2.21access-listINTERNETremark-Allowsallinsidehoststoaccesstheoutsideaccess-listINTERNETextendedpermitipanyanyaccess-groupINTERNETininterfaceinsideaccess-listRETURNremark-AllowsOSPFbackaccess-listRETURNextendedperm