2021年思科FWSM路由模式怎么配置

1、资料来源：来自本人网络整理！祝您工作顺利！2021年思科fwsm路由模式怎么配置 思科公司已成为公认的世界网络互联解决方案的领先厂商，其公司出产的一系列路由器更是引领世界，那么你知道思科fwsm路由形式怎么配置吗?下面是我整理的一些关于思科fwsm路由形式怎么配置的相关资料，供你参考。 思科fwsm路由形式配置的方法： 应用状况为，两个接口outside应用在广域网，inside端口位于局域网，跑ospf路由协议，将局域网可以被广域网访问的效劳器和端口翻开，否那么不允许访问。这个应用的状况比拟简洁，日后可以连续扩展，如效劳器区等等。 sh run : saved : fwsm version

2、3.2(2) ! hostname sddl-internal-fw domain-name sddl enable password z1ufjqzdkfrzkylf encrypted names ! interface vlan254 nameif outside security-level 0 ip address x.y.254.254 52 ospf hello-interval 1 ospf dead-interval 3 ! interface vlan2254 nameif internal security-level 99 ip address

3、 x.y.254.1 52 ospf hello-interval 1 ospf dead-interval 3 ! passwd z1ufjqzdkfrzkylf encrypted ftp mode passive - more - access-list acl-in extended permit ip any any access-list shjt_to_sddl extended permit tcp any any eq telnet access-list shjt_to_sddl extended permit icmp any any acces

4、s-list shjt_to_sddl extended permit ospf any any access-list shjt_to_sddl extended permit tcp any host x.y.128.32 eq access-list shjt_to_sddl extended permit tcp any x.y.128.0 eq 3389 access-list shjt_to_sddl extended permit tcp any host x.y.1.13 eq lotusnotes access-list shjt_to_sddl

5、extended permit tcp any host x.y.128.60 eq access-list shjt_to_sddl extended permit tcp any host x.y.128.60 eq 8080 access-list shjt_to_sddl extended permit tcp host x.y.128.60 range 1976 1982 access-list shjt_to_sddl extended permit tcp host x.y.128.

6、60 range 1976 1982 access-list shjt_to_sddl extended permit tcp any x.y.128.0 eq pop3 access-list shjt_to_sddl extended permit tcp any x.y.128.0 eq smtp access-list shjt_to_sddl extended permit tcp any x.y.128.0 eq access-list shjt_to_sddl extended permit tc

7、p any x.y.128.0 eq imap4 access-list shjt_to_sddl extended permit tcp any x.y.128.0 eq 63148 access-list shjt_to_sddl extended permit udp any x.y.128.0 eq 63148 access-list shjt_to_sddl extended permit udp any x.y.128.0 eq 143 access-list shjt_

8、to_sddl extended permit udp any x.y.128.0 eq 389 access-list shjt_to_sddl extended permit tcp any x.y.128.0 eq s access-list shjt_to_sddl extended permit tcp any host x.y.128.37 eq 8000 access-list shjt_to_sddl extended permit udp any host x.y.128.37 eq 8000 access-list s

9、hjt_to_sddl extended permit tcp any host x.y.128.37 eq 7000 access-list shjt_to_sddl extended permit udp any host x.y.128.37 eq 7000 - more - access-list shjt_to_sddl extended permit udp any host x.y.128.38 eq 7000 access-list shjt_to_sddl extended permit tcp any host x.y.128.38 eq 7000 access-list

10、shjt_to_sddl extended permit tcp any host x.y.128.50 eq 8080 access-list shjt_to_sddl extended permit udp any host x.y.128.32 eq domain access-list shjt_to_sddl extended permit ip any host x.y.128.45 access-list shjt_to_sddl extended permit ip any host x.y.128.39 access-list shjt_to_sddl extended pe

11、rmit ip any host x.y.1.12 access-list shjt_to_sddl extended permit ip any host x.y.128.42 access-list shjt_to_sddl extended permit ip any host x.y.128.37 access-list shjt_to_sddl extended permit ip any host x.y.128.46 access-list shjt_to_sddl extended permit ip any host x.y.128.44 access-list shjt_t

12、o_sddl extended permit ip any host x.y.128.32 access-list shjt_to_sddl extended permit tcp host x.y.128.60 range 1976 1982 access-list shjt_to_sddl extended permit tcp host x.y.128.60 range 1976 1982 pager lines 24 logging enable logging asdm informational mtu out