crypto keyring cisco pre-shared-key address 123.1.1.1 255.255.255.0 key cisco ! crypto isakmp policy 10 authentication pre-share crypto isakmp profile L2LISAKMPPROFILE
1.download http://developer.cisco.com/web/unifiedcomputing/ucsemulatordownload 2.Use Firefox to explorer the emulator
1.创建class－map，识别传输流量 asa(config)#access-list tcp_filter1 permit tcp 192.168.201.0 255.255.255.240 any eq www asa(config)#class-map tcp_filter_class1 asa(config-cmap)#match access-list tcp_filter1
asa(config)#nat-control asa(config)#nat inside 1 0 0 asa(config)#global outside 1 int asa(config)#global dmz 1 192.168.202.1-192.168.202.10
Problem: Service Configuration Error Messages Occasionally, during bootup of Cisco hardware through Cisco IOS software, error messages similar to these are displayed: %Error opening tftp
show interface trunk default interface g1/0/8 show xlate show conn all show arp | includ 192.168.1.1 show mac address-table | includ mac
monitor session 1 source vlan 1 , 10 , 12 , 20 , 30 monitor session 1 destination interface Gi1/0/12
1.启用防火墙HTTPS服务器功能 ASA5520(config)#http server enable [port] 2.配置防火墙允许HTTPS接入 ASA5520(config)#http {network|ip-address} mask interface_name 3.指定ASDM映像的位置 ASA5520(config)#asdm p_w_picpath disk0:/as
1.配置主机名和域名 hostname asa5520 domain example.com 2.生成RSA密钥对 crypto key generate rsa modulus 1024 3.配置防火墙允许SSH接入 ssh 192.168.1.0 255.255.255.0 inside ssh 0 0 outside 4.配置空闲超时时间与版本 ssh timeout 30
ASA 5520 QOS
禁止控制台会话自动退出 Router(config)#line console 0 Router(config)#exec-timeout 0 0 重显被打乱的控制台输入 Router(config)#line console 0 Router(config)#logging synchronous
控制台密码 Router(config)#line console 0 Router(config)#login Router(config)#password 123456 虚拟终端密码 Router(config)#line vty 0 4 Router(config-line)#login Router(config-line)#password 123456 特权模式文明密
show version 查看当前运行的系统信息，包括启动文件（即IOS)等 show boot &n
Copyright © 2005-2025 51CTO.COM 版权所有 京ICP证060544号
