防火墙asa5520配置例子.docVP-ASA5520配置例子hostnameshafwOldomain-O/Ononameifnosecurity-O/--&&!O/1nonameifnosecurity-levelnoipaddressi■O/-■O/--levelnoipaddressi■O/-■interfaceManagement0/0nameifoutsidesecurity-■bootsystemdisk0:/asa704-^onecet8dnsdomain-]ookupinside_datadnsname--security-trafficpermitinter-interfacesame-security-trafficpermitintra-interfaceobject-groupicmp-typeicmp_echo_requesticmp-objectechoobject-groupicmp-typeicmp_echo_replyici叩-objectecho-replyport-objecteqtftpobject-groupserviceudpcitrixudpobject-groupicmp-typeICMPechogroup-objecticmp_echo_requestgroup-objecticmp_echo_replyobject-groupserviceudp_tftpudpport-objecteq1604object-groupserviceudp_radiusudpport-objecteq1812object-tudpport-objecteq1813object-groupserviceudp_rsa_5500udpport-objecteq5500object-groupservicetcphttptcpport-objecteqrvicetcp_http_8080tcpport-objecteq8080port-objecteqhttpsobject-groupservicetcp_ftptcpport-objecteqftpobject-groupservicetcp_ntptcpport-objecteq123object-groupserviceudp_ntpudpport-objecteqntpobject-groupservicetcp_smtptcpport-objecteqsmtpobject-groupservicetcp_sshtcpipverifyreverse-pathinterfaceinsidedataipverifyreverse-pathinterfacewebipverifyreverse-pathinterfacesecureIPverifyreverse-pathinterfacesprintipverifyreverse-pathinterfaceoutsideasdmimagedisk0:/{mac-outsideinterface}{hidingTP)arptimeout14400globaloutside1{-255-0nat(insidedata)essTistNONATnat(insidevoice)ess-listNONATnat(sprint)ess-listNONATnat(secure)ess-listNONATnat(inside_dato)ess-ess-ess-es
防火墙asa5520配置例子 来自淘豆网m.daumloan.com转载请标明出处.
