思科防火墙登陆及设置过程

《思科防火墙登陆及设置过程》由会员上传分享，免费在线阅读，更多相关内容在学术论文-天天文库。

1、一、防火墙登陆过程telnet192.168.0.1输入：123用户名：en密码：srmciscoConftShowrun二、公网IP与内网IP映射：static(inside,outside)61.142.114.180192.168.0.7netmask255.255.255.25500三、再打开端口：输入以下一笔命今如access-listacl-outpermittcpanyhost61.142.114.183eq5800(打开外部5800端口)access-listacl-outpermittcpanyhost61.142.114.183eq5900

2、(打开外部5900端口)access-listacl-outpermittcpanyhost61.142.114.183eq1433(打开外部1433端口)access-listacl-inpermittcpanyhost61.142.114.183eq1433(打开内部1433端口)access-listacl-inpermittcpanyhost61.142.114.183eq5900(打开内部5900端口)access-listacl-inpermittcpanyhost61.142.114.183eq5800(打开内部5800端口)四、登出防火墙：lo

3、gout五、增加上网电脑1、nat(inside)1192.168.0.188255.255.255.25500（上网电脑IP地址）2、arpinside192.168.0.188000f.eafa.645dalias（绑定上网电脑网卡MAC地址）六、取消上网电脑1、nonat(inside)1192.168.0.188255.255.255.25500（上网电脑IP地址）2、noarpinside192.168.0.188000f.eafa.645dalias（绑定上网电脑网卡MAC地址）七、增加可以远程控制防火墙电脑telnet192.168.0.1882

4、55.255.255.255inside八、保存已做改动设置wrme九、以下为现存防火墙配置。以下每行即为一行命今，如果不见可以从以下黑体字中COPY，进入后粘添，然后保存即可。UserAccessVerificationPassword:Typehelpor'?'foralistofavailablecommands.pix515>conftTypehelpor'?'foralistofavailablecommands.pix515>enPassword:InvalidpasswordPassword:********pix515#conftpix515(

5、config)#showrun:Saved:PIXVersion6.3(1)interfaceethernet0autointerfaceethernet1autonameifethernet0outsidesecurity0nameifethernet1insidesecurity100enablepasswordgzE5ZoPZ4Fffph7.encryptedpasswdPLBb27eKLE1o9FTBencryptedhostnamepix515domain-namecisco.comfixupprotocolftp21fixupprotocolh32

6、3h2251720fixupprotocolh323ras1718-1719fixupprotocolhttp80fixupprotocolils389fixupprotocolrsh514fixupprotocolrtsp554fixupprotocolsip5060fixupprotocolsipudp5060fixupprotocolskinny2000nofixupprotocolsmtp25fixupprotocolsqlnet1521namesaccess-listacl-outpermitipanyanyaccess-listacl-outper

7、mittcpanyhost61.142.114.180eqpop3access-listacl-outpermittcpanyhost61.142.114.180eqsmtpaccess-listacl-outpermittcpanyhost61.142.114.181eqftpaccess-listacl-outdenytcpanyanyeq135access-listacl-outdenyudpanyanyeq135access-listacl-outdenyudpanyanyeq139access-listacl-outdenytcpanyanyeqne

8、tbios-ssnaccess-lis