cisco asa 5520 8.4 (一）-- 静态nat-pat
cisco asa 5520 8.4 NAT转换配置1）定义nat转换规则object network 192.168.3.233_18096 #定义网络对象名host 192.168.3.233 #定义内网IPnat (dmz,outside) static xxx.17.xxx.36 service tcp 18096 18096 #转换规则,把内网主机192.168.3.233映射到外网xxx.17.xxx.36.2)定义访问列表方式一access-list outside_access_in_1 extended permit tcp anyobject 192.168.3.233_18096 eq 18096 #注意：目的地址为定义的NAT对象.方式二
a. object service tcp_18096_acl #定义服务对象service tcp source range 1 65535 destination eq 18096 #源端口任意端口，目的端口 #为18096b. access-list outside_access_in_1 extended permit
object tcp_18096_acl any object 192.168.3.233_180964)应用访问列表access-group outside_access_in_1 in interface outside
-----------------------------------------------------------如下是8.4版官方配置示例：Configuration Examples for Permitting or Denying Network Access
This section includes typical configuration examples for permitting or denying network access.
The following example adds a network object for inside server 1, performs static NAT for the server, and enables access to from the outside for inside server 1.
hostname(config)# object network inside-server1hostname(config)# host 10.1.1.1hostname(config)# nat (inside,outside) static 209.165.201.12hostname(config)# access-list outside_access extended permit tcp any object inside-server1 eq wwwhostname(config)# access-group outside_access in interface outside
http://www.cisco.com/en/US/docs/security/asa/asa84/configuration/guide/access_rules.html
男人有冲动可能是爱你，也可能是不爱，但没有冲动肯定是不爱! 写的真的很不错 如果没有毛片，中国的性教育简直就是一片空白！ 鸳鸳相抱何时了，鸯在一边看热闹。 伤感个性签名：誰会这样义无反顾的愛无数次而不落荒而逃。 如果回忆像钢铁般坚硬那么我是该微笑还是哭泣,如果钢铁记忆般腐蚀那这里是幻城,还是废墟.
页:
[1]