Catalyst 6509防火墙模块配置

midy

分成两个部分进行配置：\r\nCatalyst 6509加模块，可以看成是两个设备的连接，即一个防火墙加一个路由器。\r\n\r\nFWSM:\r\n\r\nnameif vlan3 outside security0\r\nnameif vlan5 inside security100\r\nip address outside 192.168.200.2 255.255.255.0\r\nip address inside 192.168.220.1 255.255.255.0\r\nroute outside 0 0 192.168.200.1 1\r\nnat (inside) 1 10.1.2.0 255.255.255.0\r\nglobal (outside) 1 interface\r\naccess-list out extended permit ip any any\r\naccess-group out in interface inside\r\nicmp permit any inside\r\nicmp permit any outside\r\n\r\n\r\nswitch:\r\n\r\nfirewall module 8 vlan-group 1 //不配置该语句，防火墙上面的vlan接口不会up\r\nfirewall vlan-group 1 3-8\r\ninterface vlan 3 //该配置决定防火墙所在的位置\r\nip address 192.168.200.1 255.255.255.0\r\nno shut