欢迎来到天天文库
浏览记录
ID:20165460
大小:77.50 KB
页数:6页
时间:2018-10-10
《关于pix的配置及注解》由会员上传分享,免费在线阅读,更多相关内容在学术论文-天天文库。
1、关于PIX的配置及注解~教育资源库 :Saved : PIXVersion6.3(1) interfaceether0auto设定端口0速率为自动 interfaceether1100full设定端口1速率为100兆全双工 interfaceether2auto设定端口2速率为自动 nameifether0outsidesecurity0设 定端口0名称为outside安全级别为0 nameifether1insidesecurity100设定端口1名称为inside安全级别为100 nameifether2d
2、mzsecurity50设定端口2名称为dmz安全级别为50 enablepassehhyy设定防火墙名称 fixupprotocolftp21 fixupprotocolh323h2251720 fixupprotocolh323ras1718-1719 fixupprotocolhttp80 fixupprotocolils389 fixupprotocolrsh514 fixupprotocolrtsp554 fixupprotocolsip5060 fixupprotocolsipudp5060 no
3、fixupprotocolskinny2000 fixupprotocolsmtp25 fixupprotocolsql1521 允许用户查看、改变、启用或禁止一个服务或协议通过PIX防火墙,防火墙默认启用了一些常见的端口,但对于ORACLE等专有端口,需要专门启用。 names access-list101permitip192.168.99.0255.255.255.0192.168.170.0255.255.255.0 access-list101permitip192.168.12.0255.255.255.0
4、192.168.180.0255.255.255.0 access-list101permitip192.168.23.0255.255.255.0192.168.180.0255.255.255.0 access-list101permitip192.168.99.0255.255.255.0192.168.101.0255.255.255.0 建立访问列表,允许特定网段的地址访问某些网段 access-list120denyicmp192.168.2.0255.255.255.0any access-list120d
5、enyicmp192.168.3.0255.255.255.0any access-list120denyicmp192.168.4.0255.255.255.0any access-list120denyicmp192.168.5.0255.255.255.0any access-list120denyicmp192.168.6.0255.255.255.0any access-list120denyicmp192.168.7.0255.255.255.0any access-list120denyicmp192.16
6、8.8.0255.255.255.0any access-list120denyicmp192.168.9.0255.255.255.0any access-list120denyicmp192.168.10.0255.255.255.0any access-list120denyicmp192.168.11.0255.255.255.0any access-list120denyicmp192.168.12.0255.255.255.0any access-list120denyicmp192.168.13.0255.
7、255.255.0any access-list120denyicmp192.168.14.0255.255.255.0any access-list120denyicmp192.168.15.0255.255.255.0any access-list120denyicmp192.168.16.0255.255.255.0any access-list120denyicmp192.168.17.0255.255.255.0any access-list120denyicmp192.168.18.0255.255.255.
8、0any access-list120denyicmp192.168.19.0255.255.255.0any access-list120denyicmp192.168.20.0255.255.255.0any access-list120
此文档下载收益归作者所有