cisco 同安全级别端口互相访问

需要开启same-security-traffic permit inter-interface该功能

interface Ethernet0/0
 nameif inside
 security-level 100
 ip address 12.0.0.1 255.0.0.0
!
interface Ethernet0/1
 nameif inside-1
 security-level 100
 ip address 13.0.0.1 255.0.0.0

static (inside,inside-1) 12.0.0.0 12.0.0.0 netmask 255.0.0.0
static (inside-1,inside) 13.0.0.0 13.0.0.0 netmask 255.0.0.0

就可以实现从12.0.0.0 到13.0.0.0的通信了

转载于:https://blog.51cto.com/wujingfeng/1126174