ASA5510 (V8.4) PPPOE 拨号上网
设置Internet 接口:
interface Ethernet0/0 nameif outside security-level 0 pppoe client vpdn group adsl -------------设置ADSL协议 ip address pppoe setroute -------------由ISP之间下发默认路由
配置Lan接口: interface Ethernet0/1 nameif inside security-level 100 ip address 192.168.10.1 255.255.255.0
设置PPPOE 拨号:
vpdn group adsl request dialout pppoe
ADSL 用户名,由ISP提供:
vpdn group adsl localname ad67338760 -------------- ad67338760 用户名
ADSL 用户名、密码,由ISP提供:
vpdn username ad67338760 password cisco store-local --------cisco 密码、ad67338760 用户名
ADSL协议设置:
vpdn group adsl ppp authentication pap
上网设置:
object network obj_any subnet 0.0.0.0 0.0.0.0 nat (inside,outside) dynamic interface
或者
object network obj_any subnet 192.168.10.0 255.255.255.0 nat (inside,outside) dynamic interface
开放ICMP列表:
access-list outside_in extended permit icmp any any
access-group outside_in in interface outside
远程管理SSH:
V8.4
username schh password cisco ssh 0.0.0.0 0.0.0.0 outside ssh timeout 5
V8.3
username schh password cisco aaa authentication ssh console LOCAL ssh 0.0.0.0 0.0.0.0 outside ssh timeout 5
修改密码:
enable password cisco
VTY Password
passwd cisco
查看接口获得的IP:
ciscoasa# show int ip brief Interface IP-Address OK? Method Status Protocol Ethernet0/0 116.231.210.32 YES CONFIG up up Ethernet0/1 192.168.10.1 YES CONFIG up up Ethernet0/2 unassigned YES unset administratively down down Ethernet0/3 unassigned YES unset administratively down down
以下链接是各种8.4 NAT设置方式
ASA8.4 NAT