asa5520防火墙透明模式的配置例子ciscoasa#shrun:Saved:ASAVersion7.2(3)!firewalltransparenthostnameciscoasadomain-namedefault.domain.invalidenablepassword8Ry2YjIyt7RRXU24encryptednames!interfaceGigabitEthernet0/0nameifoutsidesecurity-level0!interfaceGigabitEthernet0/1nameifinsidesecurity-level100!interfaceGigabitEthernet0/2shutdownnonameifnosecurity-level!interfaceGigabitEthernet0/3shutdownnonameifnosecurity-level!interfaceManagement0/0nameifmanagementsecurity-level100ipaddress192.168.1.1255.255.255.0management-only!passwd2KFQnbNIdI.2KYOUencryptedftpmodepassivednsserver-groupDefaultDNSdomain-namedefault.domain.invalidaccess-listacl_insideextendedpermitipanyanyaccess-listacl_insideextendedpermiticmpanyanyaccess-listacl_outsideextendedpermittcpanyanyeq3306access-listacl_outsideextendedpermittcpanyanyeqwwwaccess-listacl_outsideextendedpermittcpanyanyeq8080access-listacl_outsideextendedpermittcpanyanyeqhttpsaccess-listacl_outsideextendedpermittcpanyanyeqsqlnetaccess-listacl_outsideextendedpermittcpanyanyeqftpaccess-listacl_outsideextendedpermittcpanyanyeq1433access-listacl_outsideextendedpermitespanyanyaccess-listacl_outsideextendedpermitudpanyanyeqisakmpaccess-listacl_outsideextendedpermittcpanyanyeqpop3access-listacl_outsideextendedpermittcpanyanyeqsmtpaccess-listacl_outsideextendedpermiticmpanyanypagerlines24mtuoutside1500mtuinside1500mtumanagement1500ipaddress172.16.177.208255.255.255.0nofailovericmpunreachablerate-limit1burst-size1asdmimagedisk0:/ASDM-523.BINnoasdmhistoryenablearptimeout14400access-groupacl_outsideininterfaceoutsideaccess-groupacl_insideininterfaceinsidetimeoutxlate3:00:00timeoutconn0:20:00half-closed0:10:00udp0:02:00icmp0:00:02timeoutsunrpc0:10:00h3230:05:00h2251:00:00mgcp0:05:00mgcp-pat0:05:00timeoutsip0:30:00sip_media0:02:00sip-invite0:03:00sip-disconnect0:02:00timeoutuauth0:05:00absolutehttpserverenablehttp192.168.1.0255.255.255.0managementhttp0.0.0.00.0.0.0insidenosnmp-serverlocationnosnmp-servercontactsnmp-serverenabletrapssnmpauthenticationlinkuplinkdowncoldstarttelnettimeout5sshtimeout5consoletimeout0!class-mapinspection_defaultmatchdefault-inspection-traffic!!policy-maptypeinspectdnspreset_dns_mapparametersmessage-lengthmaximum512policy-mapglobal_policyclassinspection_defaultinspectdnspreset_dns_mapinspectftpinspecth323h225inspecth323rasinspectrshinspectrtspinspectesmtpinspectsqlnetinspectskinnyinspectsunrpcinspectxdmcpinspectsipinspectnetbiosinspecttftpinspectpptp!service-policyglobal_policyglobalusernameciscopassword3USUcOPFUiMCO4JkencryptedprompthostnamecontextCryptochecksum:4682fd668f251c28d32a0cb82a3ac5f3:endciscoasa#注意点：语句ipaddress172.16.177.208255.255.255.0是在interfaceGigabitEthernet0/0下配的，自己跑到外面来了，如果不配这个，好像ping不通。
