思科交换机防火墙配置

一、VLAN配置

(1)新建vlan

vlan 1

name VLAN1

(2)为vlan配置地址

interface Vlan1

no shutdown 

ip address 10.3.1.251/24

ip dhcp relay address 10.3.1.252

vrrp 1

priority 254

address 10.3.1.1

no shutdown

(3)为端口配置vlan

interface Eth1/1

description test

switchport access vlan 1

二、防火墙配置

(1) 配置端口NAT

object network 10.3.1.10_80

host 10.3.1.80

nat (inside,outside) static 218.205.81.10 service tcp 80 80

(2) 配置外网

object network 10.3.1.10

host 10.3.1.10

object network 218.205.81.10

host 218.205.81.10

nat (inside,outside) dynamic pat-pool 218.205.81.10