ASA Firewall (one)

ASA Firewall Experiment (i) 650) this.width=650; "height=" 478 "src=" http://b137.photo.store.qq.com/psb?/dd6cf90d-9cf5-423f-a387-c4b5be2610ea/ lbz4j*otkx23nuregoyzqc47mh2cmknyhtcaly7gbbc!/b/dcg5qlhyjgaa&ek=1&kp=1&pt=0&bo=wwmsagaaaaabapc! &t=5&su=0213617457&sce=0-12-12&rf=2-9 "width=" 870 "style=" margin:0px;padding:0px;border-width:0 px;border-style:none;vertical-align:top;width:847px;height:465.363px; "Alt=" dcg5qlhyjgaa&ek=1&kp=1& Pt=0&bo=wwmsagaaa "/> SW1: Interface fastethernet1/0 ! Interface FASTETHERNET1/1 Switchport Access VLAN 2 Spanning-tree Portfast ! Interface FASTETHERNET1/2 Switchport Access VLAN 3 Spanning-tree Portfast ! Interface FASTETHERNET1/3 Switchport Access VLAN 4 Spanning-tree Portfast ! Interface FASTETHERNET1/4 Switchport Access VLAN 4 Spanning-tree Portfast ! Interface FASTETHERNET1/5 Switchport Access VLAN 4 Spanning-tree Portfast ! Interface FASTETHERNET1/10 Switchport Access VLAN 2 Spanning-tree Portfast ! Interface FASTETHERNET1/11 Switchport mode Trunk Spanning-tree Portfast Interface FASTETHERNET1/15 Switchport mode Trunk Spanning-tree Portfast ! Sw1#show Vlan-switch VLAN Name Status Ports ---- -------------------------------- --------- ------------------------------- 1 Default Active fa1/0, FA1/6, FA1/7, FA1/8 FA1/9, FA1/12, FA1/13, FA1/14 2 Outside active FA1/1, FA1/10 3 Inside Active FA1/2 4 DMZ Active FA1/3, FA1/4, FA1/5 1002 Fddi-default Act/unsup 1003 Token-ring-default Act/unsup 1004 Fddinet-default Act/unsup 1005 Trnet-default Act/unsup SW2: Interface fastethernet1/0 Switchport Access VLAN 3 Spanning-tree Portfast ! Interface FASTETHERNET1/15 Switchport mode Trunk Spanning-tree Portfast ! Sw2#show Vlan-switch VLAN Name Status Ports ---- -------------------------------- --------- ------------------------------- 1 Default Active FA1/1, FA1/2, FA1/3, FA1/4 FA1/5, FA1/6, FA1/7, FA1/8 FA1/9, FA1/10, FA1/11, FA1/12 FA1/13, FA1/14 2 Outside Active 3 Inside Active fa1/0 4 DMZ Active 1002 Fddi-default Act/unsup 1003 Token-ring-default Act/unsup 1004 Fddinet-default Act/unsup 1005 Trnet-default Act/unsup OUTSIDE.R1: Interface fastethernet0/0 IP address 202.100.1.1 255.255.255.0 IP Route 0.0.0.0 0.0.0.0 202.100.1.10 Line Vty 5 15 Password Cisco Login INSIDE.R2:   Interface fastethernet0/0 IP address 10.1.1.1 255.255.255.0 IP Route 0.0.0.0 0.0.0.0 10.1.1.10 Line Vty 5 15 Password Cisco Login DMZ. R3:   Interface fastethernet0/0 IP address 192.168.1.1 255.255.255.0 IP Route 0.0.0.0 0.0.0.0 192.168.1.10 ! Line Vty 5 15 Password Cisco Login ASA: ASA (config) # show run int ! Interface GigabitEthernet0 Nameif Outside Security-level 0 IP address 202.100.1.10 255.255.255.0 ! Interface GigabitEthernet1 No Nameif No Security-level No IP address ! Interface GigabitEthernet1.3 VLAN 3 Nameif Inside Security-level 100 IP address 10.1.1.10 255.255.255.0 ! Interface GigabitEthernet1.4 VLAN 4 Nameif DMZ Security-level 50 IP address 192.168.1.10 255.255.255.0 HTTP Server Enable HTTP 0.0.0.0 0.0.0.0 Inside AAA Authentication HTTP Console LOCAL Username Fuck password you encrypted privilege 15  Use inside. R2 Telnet 192.168.1.1 Inside.r2#telnet 192.168.1.1 Trying 192.168.1.1 ... Open User Access Verification Password: Dmz.r3>q Use inside. R2 telnet 202.100.1.1 Inside.r2#telnet 202.100.1.1 Trying 202.100.1.1 ... Open User Access Verification Password: Outside.r1>q Using the DMZ telnet 202.100.1.1 Dmz. R3#telnet 202.100.1.1 Trying 202.100.1.1 ... Open User Access Verification Password: Outside.r1>q Using the DMZ telnet 10.1.1.1 DMZ. R3#telnet 10.1.1.1 Trying 10.1.1.1 ... % Connection timed out; Remote Host Not Responding Using outside Telnet 10.1.1.1 outside.r1#telnet 10.1.1.1 Trying 10.1.1.1 ... % Connection timed out; Remote Host Not Responding ASDM Remote Administration: 650) this.width=650; "height=" 302 "src=" http://b116.photo.store.qq.com/psb?/dd6cf90d-9cf5-423f-a387-c4b5be2610ea/ l8rg0tzslh0ry*ke9zuj96m7n*aphd6o8r2ftop1wqw!/b/dcfej0xpdgaa&ek=1&kp=1&pt=0&bo=sqeuaqaaaaabalg! &t=5&su=0265758737&sce=0-12-12&rf=2-9 "width=" 433 "style=" margin:0px;padding:0px;border-width:0 px;border-style:none;vertical-align:top; "alt=" Dcfej0xpdgaa&ek=1&kp=1&pt=0&bo=sqeuaqaaa "/> iOS version: 650) this.width=650; "height=" "src=" http://b138.photo.store.qq.com/psb?/dd6cf90d-9cf5-423f-a387-c4b5be2610ea/ tcv0lnxwcrfebrqe9mga22.9pgtoh2wglzlcgvgtdsu!/b/dajgr1k0iqaa&ek=1&kp=1&pt=0&bo=9geraaaaaaabame! &t=5&su=0209843873&sce=0-12-12&rf=2-9 "width=" 502 "style=" margin:0px;padding:0px;border-width:0 px;border-style:none;vertical-align:top; "alt=" Dajgr1k0iqaa&ek=1&kp=1&pt=0&bo=9geraaaaa "/>

This article from "Fan tea" blog, declined reprint!

ASA Firewall (one)