静态IP

接口配置

interface Ethernet0/0

 nameif outside

 security-level 0

 ip address 192.168.1.189 255.255.255.0 

!

interface Ethernet0/1

 nameif inside

 security-level 100

 ip address 10.10.0.1 255.255.255.0 

!

对内网外网定义acl，并应用到inside和outside上

access-list 100 extended permit icmp any any 

access-list 100 extended permit ip any any 

access-list 110 extended permit ip any any 

global (outside) 1 interface

nat (inside) 1 0.0.0.0 0.0.0.0

access-group 100 in interface outside

access-group 110 in interface inside

route outside 0.0.0.0 0.0.0.0 192.168.1.1 1

 

 

pppoe

vpdn group pppoe dialout pppoe

vpdn group pppoe localname 51655177

vpdn group pppoe ppp authentication pap/chap

vpdn username 51655177 password 123456

dhcpd auto_config outside

 

 

DHCP配置

dhcpd address 172.16.0.1-172.16.0.128 inside10

dhcpd dns 202.106.0.20 8.8.8.8 interface inside10

dhcpd lease 7200 interface inside10

dhcpd option 3 ip 172.16.0.240 interface inside

dhcpd enable inside