ASA842 Configuration Intranet DNS spoofing test

1. Test topology:

SOURCE Demand post: http://bbs.51cto.com/thread-939762-1.html

2. Basic configuration:

R1:

Interface fastethernet0/0

IP address 10.1.1.1 255.255.255.0

No shut

IP Route 0.0.0.0 0.0.0.0 10.1.1.10

R2:

Interface fastethernet0/0

IP address 10.1.1.2 255.255.255.0

No shut

IP Route 0.0.0.0 0.0.0.0 10.1.1.10

ASA842:

Interface G0

Nameif inside

Security-level 100

IP address 10.1.1.10 255.255.255.0

No shut

Interface G1

Nameif outside

Security-level 0

IP address 202.100.1.10 255.255.255.0

No shut

Route outside 0 0 202.100.1.3

Policy-map Global_policy

Class Inspection_default

Inspect ICMP

Back to the column page: http://www.bianceng.cnhttp://www.bianceng.cn/Servers/DNS/