cisco5510防火墙企业应用中文实战配置手册

GAMETUZICISCO5510078.23ASA5510INCHINAGAMETUZIspotosUSEROK…4507VLAN3192.168.3.254DNS192.168.0.12960VLAN3TURNKIP192.168.3.0192.168.3.240255.255.255.0192.168.3.254DNS:192.168.0.1CISCOASA5510E0/0IP:192.168.3.234E0/1IP10.1.1.11.PC1DHCPIPINTERNETPINGPC1Ethernetadapter:Connection-specificDNSSuffix.:gametuziDescription...........:Broadcom440xrollerPhysicalAddress.........:00-13-77-04-9DhcpEnabled...........:YesAutoconfigurationEnabled....:YesIPAddress............:10.1.1.20SubnetMask...........:255.255.0.0DefaultGateway.........:10.1.1.1DHCPServer...........:10.1.1.1DNSServers...........:192.168.0.12.PC2INTERNETPINGPC1Ethernetadapter:Connection-specificDNSSuffix.:gametuziDescription...........:Broadcom440xrollerPhysicalAddress.........:00-13-77-04-9DhcpEnabled...........:YesAutoconfigurationEnabled....:YesIPAddress............:10.1.34.34SubnetMask...........:255.255.0.0DefaultGateway.........:10.1.1.1DHCPServer...........:10.1.1.1DNSServers...........:192.168.0.13.ASA5510PATNATDNSDHCPASA5510ciscoasa#ciscoasa#conftciscoasa(config)#hosciscoasa(config)#hostnamegametuzigametuzi(config)#gametuzi(config)#hostnamegametuzi5510gametuzi5510(config)#conftgametuzi5510(config)#inte0/0E0/0gametuzi5510(config-if)#ngametuzi5510(config-if)#n?interfacemodecommands/options:nameifnoconfiguremodecommands/options:namenamesnatnat-controlnontpexecmodecommands/options:nogametuzi5510(config-if)#namegametuzi5510(config-if)#nameifougametuzi5510(config-if)#nameifoutsideINFO:Securitylevelforoutsidesetto0bydefault.gametuzi5510(config-if)#secgametuzi5510(config-if)#security-level0gametuzi5510(config-if)#nameifoutsidegametuzi5510(config-if)#ipgametuzi5510(config-if)#ipaddregametuzi5510(config-if)#ipaddress192.168.3.234255.255.255.0IPgametuzi5510(config-if)#noshugametuzi5510(config-if)#noshugametuzi5510(config-if)#endgametuzi5510#conftgametuzi5510(config)#inte0/1E0/1gametuzi5510(config-if)#segametuzi5510(config-if)#sergametuzi5510(config-if)#secugametuzi5510(config-if)#security-level100100gametuzi5510(config-if)#nagametuzi5510(config-if)#namegametuzi5510(config-if)#nameifingametuzi5510(config-if)#nameifinsidegametuzi5510(config-if)#ipaddregametuzi5510(config-if)#ipaddress10.1.1.1255.255.0.0IPgametuzi5510(config-if)#noshugametuzi5510(config-if)#noshugametuzi5510(config-if)#endgametuzi5510#gogametuzi5510#golgametuzi5510#gol?ERROR:%Unrecognizedcommandgametuzi5510#glgametuzi5510#gl?ERROR:%Unrecognizedcommandgametuzi5510#conftgametuzi5510(config)#golgametuzi5510(config)#gol?ERROR:%Unrecognizedcommandgametuzi5510(config)#gkgametuzi5510(config)#gl?configuremodecommands/options:globalgametuzi5510(config)#glgametuzi5510(config)#globalougametuzi5510(config)#global(outside)1ingametuzi5510(config)#global(outside)1in?ERROR:%Unrecognizedcommandgametuzi5510(config)#global(outside)1intgametuzi5510(config)#global(outside)1interfacePATINFO:outsideinterfaceaddressaddedtoPATpoolgametuzi5510(config)#endgametuzi5510#conftgametuzi5510(config)#routeougametuzi5510(config)#routeoutside0.0.0.00.0.0.0192.168.3.254192.168.3.254gametuzi5510(config)#nat(inside)110.1.0.0255.255.0.010.1.0.0gametuzi5510(config)#dhcpd?configuremodecommands/options:dhcpdgametuzi5510(config)#dhcpd?configuremodecommands/options:addressConfiguretheIPpooladdressrangeafterthiskeywordauto_configEnableautoconfigurationfromclientdnsConfiguretheIPaddressesoftheDNSserversafterthiskeyworddomainConfigureDNSdomainnameafterthiskeywordenableEnabletheDHCPserverleaseConfiguretheDHCPDleaselengthafterthiskeywordoptionConfigureoptionstopasstoDHCPclientsafterthiskeywordping_timeoutConfigurepingtimeoutvalueafterthiskeywordwinsConfiguretheIPaddressesoftheNETBIOSserversafterthiskeywordgametuzi5510(config)#dhcpdadregametuzi5510(config)#dhcpdaddregametuzi5510(config)#dhcpdaddress?configuremodecommands/options:WORDIPaddress[es],ip1[-ip2]gametuzi5510(config)#dhcpdaddress10.1.1.20-10.1.1.150?configuremodecommands/options:AvailableinterfacesonwhichtoenabletheDHCPserver:insideNameofinterfaceEthernet0/1outsideNameofinterfaceEthernet0/0gametuzi5510(config)#dhcpdaddress10.1.1.20-10.1.1.150ingametuzi5510(config)#dhcpdaddress10.1.1.20-10.1.1.150inside?configuremodecommands/options:crgametuzi5510(config)#dhcpdaddress10.1.1.20-10.1.1.150insideDHCPgametuzi5510(config)#dhcpd?configuremodecommands/options:addressConfiguretheIPpooladdressrangeafterthiskeywordauto_configEnableautoconfigurationfromclientdnsConfiguretheIPaddressesoftheDNSserversafterthiskeyworddomainConfigureDNSdomainnameafterthiskeywordenableEnabletheDHCPserverleaseConfiguretheDHCPDleaselengthafterthiskeywordoptionConfigureoptionstopasstoDHCPclientsafterthiskeywordping_timeoutConfigurepingtimeoutvalueafterthiskeywordwinsConfiguretheIPaddressesoftheNETBIOSserversafterthiskeywordgametuzi5510(config)#dhcpddns?configuremodecommands/options:HostnameorA.B.C.DIPaddressofserver1gametuzi5510(config)#dhcpddns192.168.0.1DNSgametuzi5510(config)#dhcpddogametuzi5510(config)#dhcpddomaingametuzigametuzi5510(config)#dhcpdengametuzi5510(config)#dhcpdenable?configuremodecommands/options:Ava