一、防火墙登陆过程telnet192.168.0.1输入：123用户名：en密码：srmciscoConftShowrun二、公网IP与内网IP映射：static(inside,outside)61.142.114.180192.168.0.7netmask255.255.255.25500三、再打开端口：输入以下一笔命今如access-listacl-outpermittcpanyhost61.142.114.183eq5800(打开外部5800端口)access-listacl-outpermittcpanyhost61.142.114.183eq5900(打开外部5900端口)access-listacl-outpermittcpanyhost61.142.114.183eq1433(打开外部1433端口)access-listacl-inpermittcpanyhost61.142.114.183eq1433(打开内部1433端口)access-listacl-inpermittcpanyhost61.142.114.183eq5900(打开内部5900端口)access-listacl-inpermittcpanyhost61.142.114.183eq5800(打开内部5800端口)四、登出防火墙：logout五、增加上网电脑1、nat(inside)1192.168.0.188255.255.255.25500（上网电脑IP地址）2、arpinside192.168.0.188000f.eafa.645dalias（绑定上网电脑网卡MAC地址）六、取消上网电脑1、nonat(inside)1192.168.0.188255.255.255.25500（上网电脑IP地址）2、noarpinside192.168.0.188000f.eafa.645dalias（绑定上网电脑网卡MAC地址）七、增加可以远程控制防火墙电脑telnet192.168.0.188255.255.255.255inside八、保存已做改动设置wrme九、以下为现存防火墙配置。以下每行即为一行命今，如果不见可以从以下黑体字中COPY，进入后粘添，然后保存即可。UserAccessVerificationPassword:Typehelpor'?'foralistofavailablecommands.pix515>conftTypehelpor'?'foralistofavailablecommands.pix515>enPassword:InvalidpasswordPassword:********pix515#conftpix515(config)#showrun:Saved:PIXVersion6.3(1)interfaceethernet0autointerfaceethernet1autonameifethernet0outsidesecurity0nameifethernet1insidesecurity100enablepasswordgzE5ZoPZ4Fffph7.encryptedpasswdPLBb27eKLE1o9FTBencryptedhostnamepix515domain-namecisco.comfixupprotocolftp21fixupprotocolh323h2251720fixupprotocolh323ras1718-1719fixupprotocolhttp80fixupprotocolils389fixupprotocolrsh514fixupprotocolrtsp554fixupprotocolsip5060fixupprotocolsipudp5060fixupprotocolskinny2000nofixupprotocolsmtp25fixupprotocolsqlnet1521namesaccess-listacl-outpermitipanyanyaccess-listacl-outpermittcpanyhost61.142.114.180eqpop3access-listacl-outpermittcpanyhost61.142.114.180eqsmtpaccess-listacl-outpermittcpanyhost61.142.114.181eqftpaccess-listacl-outdenytcpanyanyeq135access-listacl-outdenyudpanyanyeq135access-listacl-outdenyudpanyanyeq139access-listacl-outdenytcpanyanyeqnetbios-ssnaccess-listacl-outdenytcpanyanyeq445access-listacl-outdenyudpanyanyeq445access-listacl-outdenyudpanyanyeq593access-listacl-outdenytcpanyanyeq593access-listacl-outdenytcpanyanyeq5554access-listacl-outdenyudpanyanyeq5554access-listacl-outdenyudpanyanyeq5445access-listacl-outdenytcpanyanyeq5445access-listacl-outdenytcpanyanyeq9996access-listacl-outdenyicmpanyanyaccess-listacl-outpermittcpanyhost61.142.114.180eqwwwaccess-listacl-outpermittcpanyhost61.142.114.179eqwwwaccess-listacl-outpermittcpanyhost61.142.114.182eqwwwaccess-listacl-outpermittcpanyhost61.142.114.181eqwwwaccess-listacl-outpermittcpanyhost61.142.114.182eq5800access-listacl-outpermittcpanyhost61.142.114.182eq5900access-listacl-outpermittcpanyhost61.142.114.182eq1433access-listacl-indenyicmpanyanyaccess-listacl-inpermittcpanyhost61.142.114.180eqpop3access-listacl-inpermittcpanyhost61.142.114.180eqsmtpaccess-listacl-inpermittcpanyhost61.142.114.180eqwwwaccess-listacl-inpermittcpanyhost61.142.114.179eqwwwaccess-listacl-inpermittcpanyhost61.142.114.182eqwwwaccess-listacl-inpermittcpanyhost61.142.114.181eqwwwaccess-listacl-inpermittcpanyhost6...
