PIX使用一个公网IP做PAT和StaticNAT

文章作者 100test 发表时间 2007:03:14 13:21:23
来源 100Test.Com百考试题网

nameif ethernet0 outside security0
nameif ethernet1 inside security100
interface ethernet0 auto
interface ethernet1 auto
ip address outside 10.10.10.1 255.255.255.224
ip address inside 20.20.20.1 255.255.255.0
global (outside) 1 interface
nat (inside) 1 0.0.0.0 0.0.0.0 0 0
static (inside,outside) tcp 10.10.1 pop3 20.20.20.20 pop3 netmask 255.255.255.255
static (inside,outside) tcp 10.10.1 smtp 20.20.20.20 smtp netmask 255.255.255.255
static (inside,outside) tcp 10.10.1 www 20.20.20.20 www netmask 255.255.255.255
static (inside,outside) tcp 10.10.1 ftp 20.20.20.20 ftp netmask 255.255.255.255
conduit permit tcp host 10.10.10.1 eq www any
conduit permit tcp host 10.10.10.1 eq ftp any
conduit permit tcp host 10.10.10.1 eq pop3 any
conduit permit tcp host 10.10.10.1 eq smtp any
route outside 0.0.0.0 0.0.0.0 10.10.10.254