实验六 虚拟防火墙的配置

1、实验六 ASA虚拟防火墙的配置一、 实验目的通过该实验掌握ASA虚拟防火墙的配置。二、 实验任务 配置ASA虚拟防火墙 验证实验结果三、 实验设备ASA5505防火墙两台，CISCO 2950交换机两台，控制线一根，网络连接线若干，PC机若干，Sniffer软件一套四、实验拓扑图及内容拓扑图：交换机上配置:envlan datavlan 2vlan 3exiconf tint f0/2switchport access vlan 2 int f0/3switchport access vlan 3int f0/10switchport trunk encapsulation dot1q swi

2、tchport mode trunkexiexi防火墙上配置确定是否在多模式下：三 enconf tmode muli手动重启enconf tint e0no shint e1no shexiint e1inter e1.2vlan 2int e1.3vlan 3exiconte adminallocate-interface e1.2 intf1 allocate-interface e0 intf0conte aconfig-url flash:/a.cfgallocate-interface e1.3 intf1allocate-interface e0 intf0changeto co

3、ntext admininter intf1nameif insideip add 192.168.2.1 255.255.255.0no shinterface intf0nameif outsideip add 192.168.1.10 255.255.255.0no shaccess-list outside permit icmp any anyaccess-list outside permit tcp any any eq telnet access-group outside in interface outsidechangeto context ainter intf1nam

4、eif insideip add 192.168.3.1 255.255.255.0no shinterface intf0nameif outsideip add 192.168.1.11 255.255.255.0no shaccess-list outside permit icmp any anyaccess-list outside permit tcp any any eq telnet access-group outside in interface outsidechangeto sysmac-address auto外网R2上的配置hostname R2int f0/0ip

5、 address 192.168.1.1 255.255.255.0 no shexiip route 192.168.2.0 255.255.255.0 192.168.1.10 ip route 192.168.3.0 255.255.255.0 192.168.1.11 endpc1 机上配置hostname PCline vty 0 4passw ciscoexino ip routingint f0/0ip address 192.168.2.3 255.255.255.0 no shexiip default-gateway 192.168.2.1 endpc2上的配置，hostname PC2 line vty 0 4passw ciscoexino ip routingint f0/0ip address 192.168.3.3 255.255.255.0 n