路由器及防火墙配置说明.docx

资源描述

路由器及防火墙配置说明.docx

《路由器及防火墙配置说明.docx》由会员分享，可在线阅读，更多相关《路由器及防火墙配置说明.docx（12页珍藏版）》请在冰豆网上搜索。

路由器及防火墙配置说明.docx

路由器及防火墙配置说明

一、路由器配置说明

1、用配置线连接路由器console口，用开始-程序-附件-通讯-超级终端

新建超级终端，名称随便写。

设置连接用端口

设置波特率等，如下图

窗口提示如下表示连接上了

1、进入路由器输入en回车，提示密码，密码cisco

2、输入showrun可以看到路由器配置

配置如下：

cisco>en

Password:

cisco#showrun

Buildingconfiguration...

Currentconfiguration:

1726bytes

Lastconfigurationchangeat07:

28:

09UTCWedNov142012

version15.0

servicetimestampsdebugdatetimemsec

servicetimestampslogdatetimemsec

noservicepassword-encryption

hostnamecisco

boot-start-marker

boot-end-marker

enablesecret5$1$gm..$mKLxWkzaBg2IlAll12BIk0

enablepasswordcisco

noaaanew-model

ipsource-route

ipcef

multilinkbundle-nameauthenticated

vpdnenable

vpdn-groupL2tp

DefaultL2TPVPDNgroup

accept-dialin

protocoll2tp

virtual-template1

nol2tptunnelauthentication

licenseudipidCISCO1841snFGL154521E3

usernamevpn1password0vpn1

interfaceFastEthernet0/0

ipaddress192.168.126.1255.255.255.0

ipnatinside

ipvirtual-reassembly

speedauto

full-duplex

nomopenabled

interfaceFastEthernet0/1

ipaddress218.204.105.37255.255.255.224

ipnatoutside

ipvirtual-reassembly

duplexauto

speedauto

interfaceVirtual-Template1

ipunnumberedFastEthernet0/1

peerdefaultipaddresspooll2tp-user

pppauthenticationchapms-chap

interfaceDialer0

noipaddress

shutdown

iplocalpooll2tp-user200.200.200.1200.200.200.3

ipforward-protocolnd

noiphttpserver

ipnatinsidesourcelist1interfaceFastEthernet0/1overload

ipnatinsidesourcestatictcp192.168.126.105001218.204.105.375001extendab

ipnatinsidesourcestatictcp192.168.126.145002218.204.105.375002extendab

ipnatinsidesourcestatictcp192.168.126.2280218.204.105.378000extendable

iproute0.0.0.00.0.0.0218.204.105.33

access-list1permit192.168.126.00.0.0.255

snmp-servercommunitypublicRO

control-plane

linecon0

lineaux0

linevty04

passwordcisco

schedulerallocate200001000

End

二、防火墙配置说明

1、连接配置同路由器，连接成功后提示如下图：

2、配置如下：

ciscoasa#showrun

Saved

ASAVersion8.2（5）

firewalltransparent

hostnameciscoasa

enablepassword8Ry2YjIyt7RRXU24encrypted

passwd2KFQnbNIdI.2KYOUencrypted

names

interfaceEthernet0/0

nameifoutside

security-level0

interfaceEthernet0/1

nameifinside

security-level100

interfaceEthernet0/2

shutdown

nonameif

nosecurity-level

interfaceEthernet0/3

shutdown

nonameif

nosecurity-level

interfaceManagement0/0

shutdown

nonameif

nosecurity-level

management-only

ftpmodepassive

access-listout_aclextendedpermitipanyany

access-listin_aclextendedpermitipanyany

pagerlines24

mtuoutside1500

mtuinside1500

ipaddress192.168.126.100255.255.255.0

icmpunreachablerate-limit1burst-size1

noasdmhistoryenable

arptimeout14400

access-groupout_aclininterfaceoutside

access-groupout_aclininterfaceinside

timeoutxlate3:

00:

timeoutconn1:

00:

00half-closed0:

10:

00udp0:

02:

00icmp0:

00:

timeoutsunrpc0:

10:

00h3230:

05:

00h2251:

00:

00mgcp0:

05:

00mgcp-pat0:

05:

timeoutsip0:

30:

00sip_media0:

02:

00sip-invite0:

03:

00sip-disconnect0:

02:

timeoutsip-provisional-media0:

02:

00uauth0:

05:

00absolute

timeouttcp-proxy-reassembly0:

01:

timeoutfloating-conn0:

00:

dynamic-access-policy-recordDfltAccessPolicy

nosnmp-serverlocation

nosnmp-servercontact

snmp-serverenabletrapssnmpauthenticationlinkuplinkdowncoldstart

cryptoipsecsecurity-associationlifetimeseconds28800

cryptoipsecsecurity-associationlifetimekilobytes4608000

cryptocatrustpoint_SmartCallHome_ServerCA

crlconfigure

cryptocacertificatechain_SmartCallHome_ServerCA

certificateca6ecc7aa5a7032009b8cebcf4e952d491

308205ec308204d4a00302010202106ecc7aa5a7032009b8cebcf4e952d49130

0d06092a864886f70d01010505003081ca310b30090603550406130255533117

3015060355040a130e566572695369676e2c20496e632e311f301d060355040b

1316566572695369676e205472757374204e6574776f726b313a303806035504

0b1331286329203230303620566572695369676e2c20496e632e202d20466f72

20617574686f72697a656420757365206f6e6c79314530430603550403133c56

6572695369676e20436c6173732033205075626c6963205072696d6172792043

657274696669636174696f6e20417574686f72697479202d204735301e170d31

30303230383030303030305a170d3230303230373233353935395a3081b5310b

300906035504061302555331173015060355040a130e566572695369676e2c20

496e632e311f301d060355040b1316566572695369676e205472757374204e65

74776f726b313b3039060355040b13325465726d73206f662075736520617420

68747470733a2f2f7777772e766572697369676e2e636f6d2f72706120286329

3130312f302d06035504031326566572695369676e20436c6173732033205365

6375726520536572766572204341202d20473330820122300d06092a864886f7

0d01010105000382010f003082010a0282010100b187841fc20c45f5bcab2597

a7ada23e9cbaf6c139b88bcac2ac56c6e5bb658e444f4dce6fed094ad4af4e10

9c688b2e957b899b13cae23434c1f35bf3497b6283488174d188786c0253f9bc

7f4326575833833b330a17b0d04e9124ad867d6412dc744a34a11d0aea961d0b

15fca34b3bce6388d0f82d0c948610cab69a3dcaeb379c00483586295078e845

63cd19414ff595ec7b98d4c471b350be28b38fa0b9539cf5ca2c23a9fd1406e8

18b49ae83c6e81fde4cd3536b351d369ec12ba566e6f9b57c58b14e70ec79ced

4a546ac94dc5bf11b1ae1c6781cb445533997f249b3f53457f861af33cfa6d7f

81f5b84ad3f585371cb5a6d009e4187b384efa0f0203010001a38201df308201

db303406082b0601050507010104283026302406082b06010505073001861868

7474703a2f2f6f6373702e766572697369676e2e636f6d30120603551d130101

ff040830060101ff02010030700603551d20046930673065060b6086480186f8

45010717033056302806082b06010505070201161c68747470733a2f2f777777

2e766572697369676e2e636f6d2f637073302a06082b06010505070202301e1a

1c68747470733a2f2f7777772e766572697369676e2e636f6d2f727061303406

03551d1f042d302b3029a027a0258623687474703a2f2f63726c2e7665726973

69676e2e636f6d2f706361332d67352e63726c300e0603551d0f0101ff040403

020106306d06082b0601050507010c0461305fa15da05b305930573055160969

6d6167652f6769663021301f300706052b0e03021a04148fe5d31a86ac8d8e6b

c3cf806ad448182c7b192e30251623687474703a2f2f6c6f676f2e7665726973

69676e2e636f6d2f76736c6f676f2e67696630280603551d110421301fa41d30

1b3119301706035504031310566572695369676e4d504b492d322d36301d0603

551d0e041604140d445c165344c1827e1d20ab25f40163d8be79a5301f060355

1d230418301680147fd365a7c2ddecbbf03009f34339fa02af333133300d0609

2a864886f70d010105050003820101000c8324efddc30cd9589cfe36b6eb8a80

4bd1a3f79df3cc53ef829ea3a1e697c1589d756ce01d1b4cfad1c12d05c0ea6e

b2227055d92033403307c26583fa8f43379bea0e9a6c70eef69c803bd937f47a

6decd0187d494aca99c71928a2bed87724f78526866d8705404167d1273aeddc

481d22cd0b0b8bbcf4b17bfdb499a8e9762ae11a2d876e74d388dd1e22c6df16

b62b82140a945cf250ecafceff62370dad65d3064153ed0214c8b55828a1ace0

5becb37f954afb03c8ad26dbe66678124ad99f42fbe198e642839b8f8f6724e8

6119b5ddcdb50b26058ec36ec4c875b846cfe218065ea9aea8819a4716de0c28

6c2527b9deb78458c61f381ea4c4cb66

quit

telnettimeout5

sshtimeout5

consoletimeout0

threat-detectionbasic-threat

threat-detectionstatisticsaccess-list

nothreat-detectionstatisticstcp-intercept

class-mapinspection_default

matchdefault-inspection-traffic

policy-maptypeinspectdnspreset_dns_map

parameters

message-lengthmaximumclientauto

message-lengthmaximum512

policy-mapglobal_policy

classinspection_default

inspectdnspreset_dns_map

inspectftp

inspecth323h225

inspecth323ras

inspectrsh

inspectrtsp

inspectesmtp

inspectsqlnet

inspectskinny

inspectsunrpc

inspectxdmcp

inspectsip

inspectnetbios

inspecttftp

inspectip-options

service-policyglobal_policyglobal

prompthostnamecontext

call-homereportinganonymous

Cryptochecksum:

cc427aac0bb53f9098d3407cc5adf9ac

end

展开阅读全文