Catalyst 6509防火墻模塊配置

midy

分成兩個(gè)部分進(jìn)行配置：\r\nCatalyst 6509加模塊，可以看成是兩個(gè)設(shè)備的連接，即一個(gè)防火墻加一個(gè)路由器。\r\n\r\nFWSM:\r\n\r\nnameif vlan3 outside security0\r\nnameif vlan5 inside security100\r\nip address outside 192.168.200.2 255.255.255.0\r\nip address inside 192.168.220.1 255.255.255.0\r\nroute outside 0 0 192.168.200.1 1\r\nnat (inside) 1 10.1.2.0 255.255.255.0\r\nglobal (outside) 1 interface\r\naccess-list out extended permit ip any any\r\naccess-group out in interface inside\r\nicmp permit any inside\r\nicmp permit any outside\r\n\r\n\r\nswitch:\r\n\r\nfirewall module 8 vlan-group 1 //不配置該語(yǔ)句，防火墻上面的vlan接口不會(huì)up\r\nfirewall vlan-group 1 3-8\r\ninterface vlan 3 //該配置決定防火墻所在的位置\r\nip address 192.168.200.1 255.255.255.0\r\nno shut