ASA 5510 配置案例(解决端口映射问题)VIP免费

ASA5510配置案例(解决端口映射问题).txt老公如果你只能在活一天，我愿用我的生命来延续你的生命，你要快乐的生活在提出分手的时候请不要说还爱我。CiscoASA5505防火墙端口映射问题解决基本情况:WAN:221.221.147.195Gateway:221.221.147.200LAN:192.168.0.1内网中有一台服务器,地址:192.168.0.10端口:8089故障描述:内网可正常连接至服务器,外网无法连接.端口映射出现问题.解决方法:命令行错误,已更正并解决.问题重点:采用"static(inside,outside)221.221.147.195192.168.0.10tcp8089"映射.目前配置如下:ASAVersion7.2(2)!hostnameciscoasaenablepassword8Ry2YjIyt7RRXU24encryptednames!interfaceVlan1nameifinsidesecurity-level100ipaddress192.168.0.1255.255.255.0!interfaceVlan2nameifoutsidesecurity-level0ipaddress221.221.147.195255.255.255.252!interfaceEthernet0/0switchportaccessvlan2!interfaceEthernet0/1!interfaceEthernet0/2!!interfaceEthernet0/4!interfaceEthernet0/5!interfaceEthernet0/6!interfaceEthernet0/7!passwd2KFQnbNIdI.2KYOUencryptedftpmodepassiveaccess-list101extendedpermittcpanyhost221.221.147.195eq8089access-list101extendedpermiticmpanyanyaccess-list101extendedpermittcpanyanyaccess-list101extendedpermitudpanyanypagerlines24loggingasdminformationalmtuinside1500mtuoutside1500icmpunreachablerate-limit1burst-size1noasdmhistoryenablearptimeout14400global(outside)1interfacestatic(inside,outside)221.221.147.195192.168.0.10netmask255.255.255.255tcp80890access-group101ininterfaceoutsiderouteoutside0.0.0.00.0.0.0221.221.147.2001timeoutxlate3:00:00timeoutconn1:00:00half-closed0:10:00udp0:02:00icmp0:00:02timeoutsunrpc0:10:00h3230:05:00h2251:00:00mgcp0:05:00mgcp-pat0:05:00timeoutsip0:30:00sip_media0:02:00sip-invite0:03:00sip-disconnect0:02:00timeoutuauth0:05:00absolutehttpserverenablenosnmp-serverlocationnosnmp-servercontactsnmp-serverenabletrapssnmpauthenticationlinkuplinkdowncoldstarttelnettimeout5sshtimeout5consoletimeout0dhcpdauto_configoutside!!class-mapinspection_defaultmatchdefault-inspection-traffic!policy-maptypeinspectdnspreset_dns_mapparametersmessage-lengthmaximum512policy-mapglobal_policyclassinspection_defaultinspectdnspreset_dns_mapinspectftpinspecth323h225inspecth323rasinspectrshinspectrtspinspectesmtpinspectsqlnetinspectskinnyinspectsunrpcinspectxdmcpinspectsipinspectnetbiosinspecttftp!service-policyglobal_policyglobalprompthostnamecontextCryptochecksum:30e219cbc04a4c919e7411de55e14a64:endciscoasa(config)#------------------------------------------------------------在找寻解决方案过程中,有朋友做了重要提示,采用:static(inside,outside)int192.168.0.10tcp8089做映射,但出现警告提示:WARNING:staticrediretingalltrafficsatoutsideinterface;WARNING:allservicesterminatingatoutsideinterfacearedisabled.后来将命令改成:static(inside,outside)221.221.147.195192.168.0.10tcp8089问题解决.这几天又配置一个asa5505的防火墙采用static(inside,outside)221.221.147.195192.168.0.10tcp8089不通。后采用static(inside,outside)tcpinterface8089192.168.0.103389netmask255.255.255.255