ASA 5510 配置案例(解决端口映射问题).doc

ASA5510配置案例(解决端口映射问题).txt老公如果你只能在活一天，我愿用我的生命来延续你的生命，你要快乐的生活在提出分手的时候请不要说还爱我。CiscoASA5505防火墙端口映射问题解决

基本情况:

WAN:221.221.147.195Gateway:221.221.147.200LAN:192.168.0.1

内网中有一台服务器,地址:192.168.0.10端口:8089

故障描述:内网可正常连接至服务器,外网无法连接.端口映射出现问题.

解决方法:命令行错误,已更正并解决.

问题重点:采用"static(inside,outside)221.221.147.195192.168.0.10tcp8089"映射.

目前配置如下:

ASAVersion7.2(2)
!
hostnameciscoasa
enablepassword8Ry2YjIyt7RRXU24encrypted
names
!
interfaceVlan1
nameifinside
security-level100
ipaddress192.168.0.1255.255.255.0
!
interfaceVlan2
nameifoutside
security-level0
ipaddress221.221.147.195255.255.255.252
!
interfaceEthernet0/0
switchportaccessvlan2
!
interfaceEthernet0/1
!
interfaceEthernet0/2
!
!
interfaceEthernet0/4
!
interfaceEthernet0/5
!
interfaceEthernet0/6
!
interfaceEthernet0/7
!
passwd2KFQnbNIdI.2KYOUencrypted
ftpmodepassive
access-list101extendedpermittcpanyhost221.221.147.195eq8089
access-list101extendedpermiticmpanyany
access-list101extendedpermittcpanyany
access-list101extendedpermitudpanyany
pagerlines24
loggingasdminformational
mtuinside1500
mtuoutside1500
icmpunreachablerate-limit1burst-size1
noasdmhistoryenable
arptimeout14400
global(outside)1interface
static(inside,outside)221.221.147.195192.168.0.10netmask255.255.255.255tcp80890
access-group101ininterfaceoutside
routeoutside0.0.0.00.0.0.0221.221.147.2001
timeoutxlate3:00:00
timeoutconn1:00:00half-closed0:10:00udp0:02:00icmp0:00:02
timeoutsunrpc0:10:00h3230:05:00h2251:00:00mgcp0:05:00mgcp-pat0:05:00
timeoutsip0:30:00sip_media0:02:00sip-invite0:03:00sip-disconnect0:02:00
timeoutuauth0:05:00absolute
httpserverenable
nosnmp-serverlocation
nosnmp-servercontact
snmp-serverenabletrapssnmpauthenticationlinkuplinkdowncoldstart
telnettimeout5
sshtimeout5
consoletimeout0
dhcpdauto_configoutside
!

!
class-mapinspection_default
matchdefault-inspection-traffic
!
policy-maptypeinspectdnspreset_dns_map
parameters
message-lengthmaximum512
policy-mapglobal_policy
classinspection_default
inspectdnspreset_dns_map
inspectftp
inspecth323h225
in