思科防火墙登陆及设置过程.doc

《思科防火墙登陆及设置过程.doc》由会员上传分享，免费在线阅读，更多相关内容在行业资料-天天文库。

1、一、防火墙登陆过程telnet192.168.0.1输入：123用户名：en密码：srmciscoConftShowrun二、公网IP与内网IP映射：static(inside,outside)61.142.114.180192.168.0.7netmask255.255.255.25500三、再打开端口：输入以下一笔命今如access-listacl-outpermittcpanyhost61.142.114.183eq5800(打开外部5800端口)access-listacl-outpermittcpanyhost61.142.114.183e

2、q5900(打开外部5900端口)access-listacl-outpermittcpanyhost61.142.114.183eq1433(打开外部1433端口)access-listacl-inpermittcpanyhost61.142.114.183eq1433(打开内部1433端口)access-listacl-inpermittcpanyhost61.142.114.183eq5900(打开内部5900端口)access-listacl-inpermittcpanyhost61.142.114.183eq5800(打开内部5800端口)

3、四、登出防火墙：logout五、增加上网电脑1、nat(inside)1192.168.0.188255.255.255.25500（上网电脑IP地址）2、arpinside192.168.0.188000f.eafa.645dalias（绑定上网电脑网卡MAC地址）六、取消上网电脑1、nonat(inside)1192.168.0.188255.255.255.25500（上网电脑IP地址）2、noarpinside192.168.0.188000f.eafa.645dalias（绑定上网电脑网卡MAC地址）七、增加可以远程控制防火墙电脑telne

4、t192.168.0.188255.255.255.255inside八、保存已做改动设置wrme九、以下为现存防火墙配置。以下每行即为一行命今，如果不见可以从以下黑体字中COPY，进入后粘添，然后保存即可。UserAccessVerificationPassword:Typehelpor'?'foralistofavailablecommands.pix515>conftTypehelpor'?'foralistofavailablecommands.pix515>enPassword:InvalidpasswordPassword:*******

5、*pix515#conftpix515(config)#showrun:Saved:PIXVersion6.3(1)interfaceethernet0autointerfaceethernet1autonameifethernet0outsidesecurity0nameifethernet1insidesecurity100enablepasswordgzE5ZoPZ4Fffph7.encryptedpasswdPLBb27eKLE1o9FTBencryptedhostnamepix515domain-namecisco.comfixupprot

6、ocolftp21fixupprotocolh323h2251720fixupprotocolh323ras1718-1719fixupprotocolhttp80fixupprotocolils389fixupprotocolrsh514fixupprotocolrtsp554fixupprotocolsip5060fixupprotocolsipudp5060fixupprotocolskinny2000nofixupprotocolsmtp25fixupprotocolsqlnet1521namesaccess-listacl-outpermi

7、tipanyanyaccess-listacl-outpermittcpanyhost61.142.114.180eqpop3access-listacl-outpermittcpanyhost61.142.114.180eqsmtpaccess-listacl-outpermittcpanyhost61.142.114.181eqftpaccess-listacl-outdenytcpanyanyeq135access-listacl-outdenyudpanyanyeq135access-listacl-outdenyudpanyanyeq139

8、access-listacl-outdenytcpanyanyeqnetbios-ssnaccess-lis