Cisco ASA 5505 （Version 9.X）的 LAN上网和NAT的配置

目标：掌握Cisco ASA 5505 （Version 9.X）LAN上网和NAT的配置

轻松掌握Cisco ASA Version 9.X 的LAN上网和NAT配置

详细配置：

ASA # show run
:
ASA Version 9.1(7)31
!
hostname ASA
enable password 5HCygneKtLabhS2F encrypted
names
!
interface Ethernet0/0
switchport access vlan 2 ---------- 把外网IP划入 防火墙0/0端口，ISP运营商的提供的网线直接这里
!
interface Ethernet0/1 ------------ 内网的交换机或者PC接这里
!
interface Ethernet0/2
!
interface Ethernet0/3
!
interface Ethernet0/4
!
interface Ethernet0/5
!
interface Ethernet0/6
!
interface Ethernet0/7
!
interface Vlan1
nameif inside
security-level 100
ip address 192.168.8.254 255.255.255.0 ------------内网LAN网段的网关
!
interface Vlan2
nameif outside
security-level 0
ip address 116.6.78.136 255.255.255.240 --------------外网WAN的IP地址，由ISP运营商提供
!
ftp mode passive
object network obj_any -----------------引用内网所有网段，此处可以单独写某个需要上网的网段
subnet 0.0.0.0 0.0.0.0
object network WEB-Server --------------需要映射到外网的WEB服务器
host 192.168.8.222
access-list 100 extended permit icmp any any -------------- **允许ping **
access-list 100 extended permit ip any any ---------------允许访问
pager lines 24
logging asdm informational
mtu inside 1500
mtu outside 1500
icmp unreachable rate-limit 1 burst-size 1
no asdm history enable