思科FWSM路由模式怎么配置(2)
<--- More --->
icmp permit any Internal
no asdm history enable
学习啦在线学习网 arp timeout 14400
学习啦在线学习网 access-group SHJT_to_SDDL in interface outside
access-group acl-in in interface Internal
!
学习啦在线学习网 router ospf 100
network X.Y.254.1 255.255.255.255 area 0
network X.Y.254.254 255.255.255.255 area 0
学习啦在线学习网 router-id X.Y.254.254
log-adj-changes
!
学习啦在线学习网 timeout xlate 3:00:00
学习啦在线学习网 timeout conn 1:00:00 half-closed 0:10:00 udp 0:02:00 icmp 0:00:02
timeout sunrpc 0:10:00 h323 0:05:00 h225 1:00:00 mgcp 0:05:00
学习啦在线学习网 timeout mgcp-pat 0:05:00 sip 0:30:00 sip_media 0:02:00
timeout sip-invite 0:03:00 sip-disconnect 0:02:00
学习啦在线学习网 timeout uauth 0:05:00 absolute
aaa-server TACACS+ protocol tacacs+
aaa-server RADIUS protocol radius
username sddl password QZbkfU0FC8LZLZ6k encrypted
http server enable
http 0.0.0.0 0.0.0.0 outside
学习啦在线学习网 http X.Y.160.0 255.255.255.0 Internal
<--- More --->
学习啦在线学习网 http X.Y.128.0 255.255.255.0 Internal
学习啦在线学习网 no snmp-server location
no snmp-server contact
snmp-server community public
snmp-server enable traps snmp authentication linkup linkdown coldstart
学习啦在线学习网 sysopt nodnsalias inbound
学习啦在线学习网 sysopt nodnsalias outbound
学习啦在线学习网 sysopt noproxyarp outside
学习啦在线学习网 sysopt noproxyarp Internal
学习啦在线学习网 telnet 0.0.0.0 0.0.0.0 outside
telnet 0.0.0.0 0.0.0.0 Internal
telnet timeout 5
ssh timeout 5
学习啦在线学习网 console timeout 0
!
class-map class_sip_tcp
match port tcp eq sip
class-map inspection_default
match default-inspection-traffic
!
!
policy-map global_policy
class inspection_default
inspect dns maximum-length 512
<--- More --->
inspect ftp
学习啦在线学习网 inspect h323 h225
inspect h323 ras
学习啦在线学习网 inspect netbios
inspect rsh
学习啦在线学习网 inspect skinny
inspect esmtp
inspect sqlnet
inspect sunrpc
学习啦在线学习网 inspect tftp
学习啦在线学习网 inspect xdmcp
inspect ctiqbe
inspect dcerpc
inspect http
inspect icmp
inspect ils
inspect mgcp
inspect rtsp
inspect sip
学习啦在线学习网 inspect snmp
学习啦在线学习网 class class_sip_tcp
学习啦在线学习网 inspect sip
!
service-policy global_policy global
<--- More --->
prompt hostname context
Cryptochecksum:3224aa347a06e32ac4f006510f5606f0
: end
学习啦在线学习网 SDDL-Internal-FW# exit
看过文章学习啦在线学习网“思科FWSM路由模式怎么配置”的人还看了: