[Note] 配置IOS/PIX实现SDM/ASDM管理

Part I. 配置IOS实现SDM管理

1>查看IOS及设备是否支持SDM管理

Table 1 SDM-Supported Routers and Cisco IOS Versions 

SDM-Supported Routers	SDM-Supported Cisco IOS Versions
Cisco 831 and 837	•12.2(13)ZH or later •12.3(2)XA or later •12.3(2)T or later
Cisco 836	•12.2(13)ZH or later •12.3(2)XA or later •12.3(4)T or later
Cisco 1701	•12.2(13)ZH or later •12.3(2)XA or later (SDM does not support Cisco IOS release 12.3(2)XF) •12.3(4)T or later
Cisco 1711 and 1712	•12.2(15)ZL or later •12.3(2)XA or later (SDM does not support Cisco IOS release 12.3(2)XF)
Cisco 1710, 1721, 1751, 1751-v, 1760, and 1760-v	•12.2(13)ZH or later •12.3(2)XA or later (SDM does not support Cisco IOS release 12.3(2)XF) •12.2(13)T3 or later •12.3(2)T or later •12.3(1)M or later •12.2(15)ZJ3 (not available for the 1710 or 1721)
Cisco 1841	•12.3(8)T4 or later
Cisco 2610XM, 2611XM, 2620XM, 2621XM, 2650XM, 2651XM, and 2691	•12.2(11)T6 or later •12.3(2)T or later •12.3(1)M or later •12.3(4)XD •12.2(15)ZJ3
Cisco 2801, 2811, 2821 and ,2851	•12.3(8)T4 or later
Cisco 3640, 3661, and 3662	•12.2(11)T6 or later •12.3(2)T or later •12.3(1)M or later •12.3(4)XD •12.2(15)ZJ3
Cisco 3620	•12.2(11)T6 or later •12.3(1)M or later
Cisco 3640A	•12.2(13)T3 or later •12.3(2)T or later •12.3(1)M or later •12.3(4)XD •12.2(15)ZJ3
Cisco 3725 and 3745	•12.2(11)T6 or later •12.3(2)T or later •12.3(1)M or later •12.3(4)XD •12.2(15)ZJ3
Cisco 3825 and 3845	•12.3(11)T or later
Cisco 7204VXR and 7206VXR	•12.3(2)T or later •12.3(1)M or later SDM does not support B, E, or S train releases on the Cisco 7000 routers.
Cisco 7301	•12.3(2)T or later •12.3(3)M or later SDM does not support B, E, or S train releases on the Cisco 7000 routers.

2>IOS配置

Router# configure terminal
Enter configuration commands, one per line. End with CNTL/Z.
Router(config)# ip http server
Router(config)# ip http secure-server
Router(config)# ip http authentication local
Router(config)# ip http timeout-policy idle 600 life 86400 requests 10000


Router(config)# username sense privilege 15 secret cisco


Router(config)# line vty 0 4
Router(config-line)# privilege level 15
Router(config-line)# login local
Router(config-line)# transport input telnet ssh
Router(config-line)# exit


Router(config)# logging buffered 51200 warning

Router(config)# int f0/1
Router(config-if)# ip add 192.168.1.1 255.255.255.0
Router(config-if)# no shut

Part II. 配置PIX实现ASDM管理

PIX配置：

pixfirewall# conf t
pixfirewall(config)# username sense password cisco privilege 15
pixfirewall(config)# http ?

configure mode commands/options:
  Hostname or A.B.C.D The IP address of the host and/or network authorized to
  access the HTTP server
  X:X:X:X::X/<0-128> IPv6 address/prefix authorized to access the HTTP server
  server Enable the http server required to run Device Manager

pixfirewall(config)# http server enable
pixfirewall(config)# http 16.1.1.1 255.255.255.255 inside
pixfirewall(config)# domain-name cisco.com

pixfirewall(config)# copy tftp flash:
Address or name of remote host []? 16.1.1.1
Source filename []? asdm6.bin
Destination filename [asdm6.bin]?