发信人: eghost (eghost), 信区: NetManagement 标 题: cisco pix防火墙不能端口映射问题 发信站: 中国Cisco技术论坛 (2007年11月24日10:59:39 星期六), 站内信件 想做一个ftp服务器 内网ftp服务器IP为10.77.44.72 外网IP为59.33.250.110 网上查了资料，说添加两条命令就行 static (inside,outside) tcp 59.33.250.110 ftp 10.77.44.72 ftp netmask 255.255.255.255 0 0 conduit permit tcp any eq ftp any 但添加后还是实现不了，请教为什么～ 以下是配置文件 GD-HZHD-PIX515E(config)# show config : Saved : Written by enable_15 at 21:59:37.399 UTC Fri Nov 23 2007 PIX Version 6.3(4) interface ethernet0 auto interface ethernet1 auto nameif ethernet0 outside security0 nameif ethernet1 inside security100 enable password XXXXXX encrypted passwd XXXXXX encrypted hostname GD-HZHD-PIX515E domain-name gd-hzhd-t fixup protocol dns maximum-length 512 fixup protocol ftp 21 fixup protocol h323 h225 1720 fixup protocol h323 ras 1718-1719 fixup protocol http 80 fixup protocol rsh 514 fixup protocol rtsp 554 fixup protocol sip 5060 fixup protocol sip udp 5060 fixup protocol skinny 2000 fixup protocol smtp 25 fixup protocol sqlnet 1521 fixup protocol tftp 69 names pager lines 24 mtu outside 1500 mtu inside 1500 ip address outside 59.33.250.106 255.255.255.248 ip address inside 10.77.44.3 255.255.255.128 ip audit info action alarm ip audit attack action alarm pdm history enable arp timeout 14400 global (outside) 1 59.33.250.110 nat (inside) 1 0.0.0.0 0.0.0.0 0 0 static (inside,outside) tcp 59.33.250.110 ftp 10.77.44.72 ftp netmask 255.255.25 5.255 0 0 conduit permit icmp any any conduit permit tcp host 59.33.250.108 eq www any conduit permit udp host 59.33.250.108 eq domain any conduit permit tcp any eq ftp any route outside 0.0.0.0 0.0.0.0 59.33.250.105 1 timeout xlate 3:00:00 timeout conn 1:00:00 half-closed 0:10:00 udp 0:02:00 rpc 0:10:0 timeout h323 0:05:00 mgcp 0:05:00 sip 0:30:00 sip_media 0:02:00 timeout uauth 0:05:00 absolute aaa-server TACACS+ protocol tacacs+ aaa-server TACACS+ max-failed-attempts 3 aaa-server TACACS+ deadtime 10 aaa-server RADIUS protocol radius aaa-server RADIUS max-failed-attempts 3 aaa-server RADIUS deadtime 10 aaa-server LOCAL protocol local http server enable http 10.77.44.100 255.255.255.255 inside no snmp-server location no snmp-server contact snmp-server community public no snmp-server enable traps floodguard enable telnet 10.77.44.55 255.255.255.255 inside telnet 10.77.44.99 255.255.255.255 inside telnet 10.77.44.70 255.255.255.255 inside telnet timeout 5 ssh timeout 5 console timeout 0 terminal width 80 Cryptochecksum:91e3c112fda6e5640959621d36b9f160 请高手帮忙分析一下 -- ※ 来源:·中国Cisco技术论坛 bbs.ccxx.net·[FROM: 59.33.250.106] |
|
re: 请问大家有谁知道如何用sniffer pro?谢谢了！！� 请问现在经营网吧需要怎样一个流程? .... 辽宁服务器托管‖辽宁服务器租用‖诚招代理商‖QQ:48 北京阜康专业维修cisco思科全系列产品 北京阜康回收二手思科 大量CISCO 库存 甩了啊!~~ 北京二手网络设备超市 价格优惠喔!~`` 【北京中龙】二手CISCO华为回收/租赁/出售 |