cisco路由器和pix525的链条

prollerweg

conf t　　PIX Version 6.3(5)
　　interface ethernet0 auto
　　interface ethernet1 auto
　　interface gb-ethernet0 1000auto
　　interface gb-ethernet1 1000auto
　　nameif ethernet0 outside security0
　　nameif ethernet1 inside security100
　　nameif gb-ethernet0 intf2 security4
　　nameif gb-ethernet1 intf3 security6
　　enable password QuksFkaVtt.imHjQ encrypted
　　passwd QuksFkaVtt.imHjQ encrypted
　　hostname pixfirewall
　　domain-name ciscopix.com
　　fixup protocol dns maximum-length 512
　　fixup protocol ftp 21
　　fixup protocol h323 h225 1720
　　fixup protocol h323 ras 1718-1719
　　fixup protocol http 80
　　fixup protocol rsh 514
　　fixup protocol rtsp 554
　　fixup protocol sip 5060
　　fixup protocol sip udp 5060
　　no fixup protocol skinny 2000
　　fixup protocol smtp 25
　　fixup protocol sqlnet 1521
　　fixup protocol tftp 69
　　names
　　pager lines 24
　　icmp permit any outside
　　icmp permit any inside
　　mtu outside 1500
　　mtu inside 1500
　　mtu intf2 1500
　　mtu intf3 1500
　　ip address outside 114.251.77.34 255.255.255.224
　　ip address inside 10.188.188.1 255.255.255.0
　　no ip address intf2
　　no ip address intf3
　　ip audit info action alarm
　　ip audit attack action alarm
　　no failover
　　failover timeout 0:00:00
　　failover poll 15
　　no failover ip address outside
　　no failover ip address inside
　　no failover ip address intf2
　　no failover ip address intf3
　　pdm location 10.188.188.0 255.255.255.0 inside
　　pdm location 10.188.188.0 255.255.255.255 inside
　　pdm location 10.188.188.5 255.255.255.255 inside
　　pdm location 10.188.188.7 255.255.255.255 inside
　　pdm location 10.188.188.9 255.255.255.255 inside
　　pdm location 10.188.188.6 255.255.255.255 inside
　　pdm location 10.188.188.8 255.255.255.255 inside
　　pdm history enable
　　arp timeout 14400
　　global (outside) 1 interface
　　nat (inside) 1 0.0.0.0 0.0.0.0 0 0
　　static (inside,outside) 114.251.77.36 10.188.188.5 netmask 255.255.255.255 0 0
　　static (inside,outside) 114.251.77.37 10.188.188.6 netmask 255.255.255.255 0 0
　　static (inside,outside) 114.251.77.38 10.188.188.7 netmask 255.255.255.255 0 0
　　static (inside,outside) 114.251.77.39 10.188.188.8 netmask 255.255.255.255 0 0
　　conduit permit icmp any any
　　conduit permit tcp host 114.251.77.39 eq www any
　　conduit permit tcp host 114.251.77.36 eq www any
　　conduit permit tcp host 114.251.77.38 eq www any
　　conduit permit tcp host 114.251.77.37 eq www any
　　outbound  10 deny 0.0.0.0 0.0.0.0 500-65535 tcp
　　outbound  10 deny 0.0.0.0 0.0.0.0 500-65535 udp
　　outbound  10 permit 10.188.188.34 255.255.255.255 500-65535 tcp
　　outbound  10 permit 10.188.188.34 255.255.255.255 500-65535 udp
　　outbound  10 permit 10.188.188.102 255.255.255.255 500-65535 tcp
　　outbound  10 permit 10.188.188.103 255.255.255.255 500-65535 tcp
　　outbound  10 permit 10.188.188.109 255.255.255.255 500-65535 tcp
　　outbound  10 permit 10.188.188.45 255.255.255.255 500-65535 tcp
　　outbound  10 permit 10.188.188.48 255.255.255.255 500-65535 tcp
　　outbound  10 permit 10.188.188.51 255.255.255.255 500-65535 tcp
　　outbound  10 permit 10.188.188.52 255.255.255.255 500-65535 tcp
　　outbound  10 permit 10.188.188.30 255.255.255.255 500-65535 tcp
　　outbound  10 permit 10.188.188.25 255.255.255.255 500-65535 tcp
　　outbound  10 permit 10.188.188.102 255.255.255.255 500-65535 udp
　　outbound  10 permit 10.188.188.241 255.255.255.255 500-65535 tcp
　　outbound  10 permit 10.188.188.49 255.255.255.255 500-65535 tcp
　　outbound  10 permit 10.188.188.140 255.255.255.255 500-65535 tcp
　　outbound  10 permit 10.188.188.38 255.255.255.255 500-65535 tcp
　　outbound  10 permit 10.188.188.38 255.255.255.255 500-65535 udp
　　outbound  10 permit 10.188.188.35 255.255.255.255 500-65535 tcp
　　outbound  10 permit 10.188.188.35 255.255.255.255 500-65535 udp
　　outbound  10 permit 10.188.188.8 255.255.255.255 500-65535 tcp
　　outbound  10 permit 10.188.188.8 255.255.255.255 500-65535 udp
　　outbound  10 permit 10.188.188.129 255.255.255.255 500-65535 tcp
　　outbound  10 permit 10.188.188.129 255.255.255.255 500-65535 udp
　　outbound  10 permit 10.188.188.66 255.255.255.255 500-65535 tcp
　　outbound  10 permit 10.188.188.66 255.255.255.255 500-65535 udp
　　outbound  10 permit 10.188.188.11 255.255.255.255 500-65535 tcp
　　outbound  10 permit 10.188.188.11 255.255.255.255 500-65535 udp
　　outbound  10 permit 10.188.188.191 255.255.255.255 500-65535 tcp
　　outbound  10 permit 10.188.188.191 255.255.255.255 500-65535 udp
　　outbound  10 permit 10.188.188.9 255.255.255.255 500-65535 tcp
　　outbound  10 permit 10.188.188.9 255.255.255.255 500-65535 udp
　　outbound  10 permit 10.188.188.6 255.255.255.255 80 tcp
　　outbound  10 permit 10.188.188.6 255.255.255.255 0 ip
　　outbound  10 permit 10.188.188.169 255.255.255.255 9876 tcp
　　outbound  10 permit 10.188.188.6 255.255.255.255 9876 tcp
　　outbound  10 permit 10.188.188.9 255.255.255.255 9876 tcp
　　outbound  10 permit 10.188.188.0 255.255.255.0 8081 tcp
　　outbound  10 permit 10.188.188.0 255.255.255.0 1557 tcp
　　outbound  10 permit 10.188.188.105 255.255.255.255 9876 tcp
　　outbound  10 permit 10.188.188.0 255.255.255.0 80 tcp
　　outbound  10 permit 10.188.188.116 255.255.255.255 8443 tcp
　　outbound  10 permit 10.188.188.112 255.255.255.255 8443 tcp
　　outbound  10 permit 10.188.188.124 255.255.255.255 8443 tcp
　　outbound  10 permit 10.188.188.111 255.255.255.255 8443 tcp
　　outbound  10 permit 10.188.188.39 255.255.255.255 500-65535 tcp
　　outbound  10 permit 10.188.188.39 255.255.255.255 500-65535 udp
　　outbound  10 permit 10.188.188.12 255.255.255.255 9876 tcp
　　outbound  10 permit 10.188.188.5 255.255.255.255 500-65535 udp
　　outbound  10 permit 10.188.188.5 255.255.255.255 500-65535 tcp
　　outbound  10 permit 10.188.188.22 255.255.255.255 995 tcp
　　outbound  10 permit 10.188.188.61 255.255.255.255 995 tcp
　　route outside 0.0.0.0 0.0.0.0 114.251.77.33 1
　　timeout xlate 3:00:00
　　timeout conn 1:00:00 half-closed 0:10:00 udp 0:02:00 rpc 0:10:00 h225 1:00:00
　　timeout h323 0:05:00 mgcp 0:05:00 sip 0:30:00 sip_media 0:02:00
　　timeout sip-disconnect 0:02:00 sip-invite 0:03:00
　　timeout uauth 0:05:00 absolute
　　aaa-server TACACS+ protocol tacacs+
　　aaa-server TACACS+ max-failed-attempts 3
　　aaa-server TACACS+ deadtime 10
　　aaa-server RADIUS protocol radius
　　aaa-server RADIUS max-failed-attempts 3
　　aaa-server RADIUS deadtime 10
　　aaa-server LOCAL protocol local
　　aaa authentication ssh console LOCAL
　　http server enable
　　http 10.188.188.0 255.255.255.0 inside
　　no snmp-server location
　　no snmp-server contact
　　snmp-server community public
　　no snmp-server enable traps
　　floodguard enable
　　telnet timeout 5
　　ssh timeout 10
　　console timeout 0
　　username test password P4ttSyrm33SV8TYp encrypted privilege 2

　　terminal>　　Cryptochecksum:cb35239e90a740877e713d248c071e11
　　: end