Chinaunix首页 | 论坛 | 博客
  • 博客访问: 475147
  • 博文数量: 132
  • 博客积分: 2995
  • 博客等级: 少校
  • 技术积分: 1412
  • 用 户 组: 普通用户
  • 注册时间: 2007-03-06 20:14
文章分类

全部博文(132)

文章存档

2010年(2)

2008年(21)

2007年(109)

我的朋友

分类:

2007-03-11 09:49:47

下面简单列出PIX 520 的基本配置
        1.Configure without NAT              
            nameif ethernet0 outside security0
            nameif ethernet1 inside security100
            interface ethernet0 auto
            interface ethernet1  auto       
          ip address outside 202.109.77.1 255.255.255.0 (假设对外端口地址)        
          ip address inside 10.1.0.9 255.255.255.0(假设内部网络为:10.1.0.0)
          hostname bluegarden
           arp timeout 14400
           no failover      
           names
           pager lines 24
         logging buffered debugging
         nat (inside) 0 0 0
          rip inside default
          no rip inside passive
          no rip outside default
          rip outside passive
          route outside 0.0.0.0 0.0.0.0 202.109.77.2  1(外连设备的内部端口地址)
          timeout xlate 3:00:00 conn 1:00:00 udp 0:02:00
          timeout rpc 0:10:00 h323 0:05:00
          timeout uauth 0:05:00 absolute
          no snmp-server location
          no snmp-server contact
          snmp-server community public
          mtu outside 1500
          mtu inside 1500     
        2.Configure with NAT
          nameif ethernet0 outside security0
          nameif ethernet1 inside security100
          interface ethernet0 auto
          interface ethernet1  auto       
         ip address outside 202.109.77.1 255.255.255.0 (假设对外端口地址)        
         ip address inside 10.1.0.9 255.255.255.0(假设内部网络为:10.1.0.0)
         hostname bluegarden
          arp timeout 14400
          no failover      
          names
          pager lines 24
         logging buffered debugging
         nat (inside) 1 0 0
          global (outside) 1 202.109.77.10-202.109.77.20
          global (outside) 1 202.109.22.21
          no rip inside default
          no rip inside passive
          no rip outside default
          no rip outside passive
          conduit permit icmp any any 
          route outside 0.0.0.0 0.0.0.0 202.109.77.2  1(外连设备的内部端口地址)
          timeout xlate 3:00:00 conn 1:00:00 udp 0:02:00
          timeout rpc 0:10:00 h323 0:05:00
          timeout uauth 0:05:00 absolute
          no snmp-server location
          no snmp-server contact
          snmp-server community public
          mtu outside 1500
          mtu inside 1500     
      
阅读(552) | 评论(0) | 转发(0) |
0

上一篇:2600 adsl 配置

下一篇:路由器配成桥的实例

给主人留下些什么吧!~~