Basic information:
WAN: 221.221.147.195 Gateway: 221.221.147.200 LAN: 192.168.0.1
There is a server in the Intranet, and the address is 192.168.0.10 port: 8089
Fault description: The Intranet can be normally connected to the server, and the Internet cannot be connected. Port ing has a problem.
Solution: a command line error has been fixed.
Key Issue: Use "static (inside, outside) 221.221.147.195 192.168.0.10 tcp 8089" ing.
The current configuration is as follows:
Change the default message level-record user logon
Step 1: Find the user logon event ID:
Hostname (config) # show log | include admin
Dec 03 2009 17: 32: 35: % ASA-6-605005: Login permitted from 192.168.202.51/3507 to inside: 192.168.2.20/ssh for user "admin"
Step 2: locate the log level of the current Message ID 605005
Hostname (config) # show logging message 605005
Syslogs 605005: default-level informational (enabled)
Step 3: change the m
Cisco ASA L2TP over IPSEC configuration details
1. Create a VPN address pool
Ciscoasa (config) # ip local pool vpnpool 192.168.151.11-192.168.151.15 mask 255.255.255.0
2. Configure the Ipsec encryption algorithms 3DES and SHA.
Ciscoasa (config) # crypto ipsec transform-set TRANS_ESP_3DES_SHA esp-3des (esp-sha-hmac)
3. Set the IPSec transmission mode to transport. The default mode is tunnel (L2TP only supports transport)
Ciscoasaconfig) # crypto ipsec
Recently began to learn Cisco's ASA to see the use of ASDM when there are some problems, the first is to report unable to launch device manage xxxx.xxx.xxx.xxx this error 650) this.width=650; "Src= "Http://s1.51cto.com/wyfs02/M01/7E/D3/wKioL1cKAhjDdBUdAAA2FMxQhuA576.png" title= "qq picture 20160410153106.png" alt= " Wkiol1ckahjddbudaaa2fmxqhua576.png "/>.Then Baidu a bit, without this error in the Chinese document is hereby written.1, first of all, in
Cisco's QoS speed limit and h3c a little difference, but overall, h3c of the comparison slag, the unit is not the same, the H3C car unit is KPBS, and the Cisco Police speed limit unit is bits per SECONDS,H3C this skipped. The theory of the token barrel is not verbose.Configure the QoS speed-limiting process on the ASA as follows:Steps:Step 1: Create ACLs to match streamsAccess-list rate_limit_lan-2 Extended Permit ip any object LAN-2Access-list rate_l
;width:847px;height:275.518px; "Alt=" dfha.0zbbqaaek=1kp=1 Pt=0bo=igmnaqaaa "/>Found SRC is 202.100.1.1Immediately understand:outside.r1#ping 2.2.2.2 Source Loopback 0Type escape sequence to abort.Sending 5, 100-byte ICMP Echos to 2.2.2.2, timeout is 2 seconds:Packet sent with a source address of 1.1.1.1!!!!!Success rate is percent (5/5), round-trip Min/avg/max = 16/25/40 msInside.r2#ping 1.1.1.1 Source Loopback 0Type escape sequence to abort.Sending 5, 100-byte ICMP Echos to 1.1.1.1, timeout is
Can I count online users without using Global. asa?
SessionID = session. SessionIDTimeout = 5'Set the session persistence time.
Conn_String = "DRIVER = {Microsoft Access Driver (*. mdb)}; DBQ =" Server. MapPath ("count. mdb ")'Conn _ String = "activeUser"'It is best to set DSN = "activeuser" because we need to include this file in all ASP scripts.
Set ConnCount = Server. CreateObject ("ADODB. Connection ")ConnCount. Open Conn_String
Aaa = dateadd ("n
Company A Cisco asa5505 collapsed, fortunately there is a standby machine, but before the other people have used, do not know the login password, so take out the console line access to the standby 5505, re-power, press ESC at startup, then the prompt Rommon #0 >The value of the configuration register is 0x41 Rommon #0 >confreg 0x41Enter reboot, restart the device Rommon #1 >rebootThe process of entering a password is skipped after restarting the deviceSee the Prompt ciscoasa>Change PasswordCisco
A. Test topology
Note:
A.branch Router gns iOS for c7200-adventerprisek9-mz.152-4.s, download address: http://down.51cto.com/data/607191
B.centerasa is using a ASA8.42 VMware virtual machine.
Two. Basic Configuration
A.branch Router
Interface fastethernet0/0
IP address 202.100.1.1 255.255.255.0
No shut
Interface Loopback0
IP address 172.16.1.1 255.255.255.0
IP Route 0.0.0.0 0.0.0.0 202.100.1.10
B.internet Router
Interface fastethernet0/0
IP address 202.100.1.10 255.255.255.0
No
Tags: Sybase SQL anywhere table information SQLIn Sybase central tools, we can often see the following pages:650) this.width=650; "src=" Http://s2.51cto.com/wyfs02/M02/89/67/wKiom1gRyE_zM-JyAABH3iPUDEM213.png "title=" Sybasecentral001.png "style=" border:1px solid #000000; "alt=" Wkiom1grye_zm-jyaabh3ipudem213.png "/>There was a client who had to export such a table data yesterday, so I wrote the following SQL statement to query the table information:Select
tbl.table_name as "name",
usr.user_nam
1, the external network for 1 fixed IP, do NAT let intranet share Internet.G0: External network port: 192.168.0.4/24Extranet Gateway: 192.168.0.1G2: Intranet port (Gateway of intranet): 172.16.0.1/24Only key commands are listed below:Interface GigabitEthernet0Nameif outside//designated external network port is outsideSecurity-level 10//Security level manually modified to 10, or it can be the default of 0IP address 192.168.0.4 255.255.255.0Interface GigabitEthernet2Nameif inside//designated intra
. changeappsanalysis0A dialedstring is a networking route between internal nodes. It indicates the Starting number. If only one segment is restricted, enter a number such as 6001. If only one segment is restricted, enter 60, and set the length to 4, in this way, 99 numbers can be used. routepattern represents the type, and our 3 represents siptrunk.16. After steps 13, 14, and 15 are completed, perform the following operations)A. Enter systemmanager --> routing --> entitylinks --> new, configurat
NAT configuration of the ASA/PIX Firewall1. configure a public address pool for NAT translation nat (inside) 1 10.0.0.0 255.255.255.0global (outside) 1 222.172.200.20-222.172.200.30 // can this command be unavailable? And the tab key are incomplete, but you don't have to worry about it. Just press it to finish. Or global (outside) 1 222.172.200.20 2. NAT for a public network with only one fixed IP address is converted to nat (inside) 1 10.0.0.0 255.25
1. Configure NAT translation for a public network address poolNat (inside) 1 10.0.0.0 255.255.255.0Global (Outside) 1 222.172.200.20-222.172.200.30//This command may not work? And the TAB key is not complete, but no tube, according to lose can.OrGlobal (outside) 1 222.172.200.202, the public network only 1 fixed IP NAT conversionNat (inside) 1 10.0.0.0 255.255.255.0Global (Outside) 1 222.172.200.68//Designated public network address is a network segment3, Pat conversion, suitable for non-fixed I
The content source of this page is from Internet, which doesn't represent Alibaba Cloud's opinion;
products and services mentioned on that page don't have any relationship with Alibaba Cloud. If the
content of the page makes you feel confusing, please write us an email, we will handle the problem
within 5 days after receiving your email.
If you find any instances of plagiarism from the community, please send an email to:
info-contact@alibabacloud.com
and provide relevant evidence. A staff member will contact you within 5 working days.