asa防火墙透明模式步骤

ciscoasa# 
ciscoasa# show run
ciscoasa# show running-config 
: Saved

: 
: Serial Number: FCH184171XK
: Hardware:   ASA5525, 8192 MB RAM, CPU Lynnfield 2394 MHz, 1 CPU (4 cores)
:
ASA Version 9.8(2) 
!
firewall transparent
hostname ciscoasa
enable password $sha512$5000$OhWoAaKKLy6Xva3hY44xzQ==$jq1KD+ciHZfjvuclb8lw/w== pbkdf2
names

!
interface GigabitEthernet0/0
 shutdown
 no nameif
 no security-level
!
interface GigabitEthernet0/1
 bridge-group 1
 nameif outside
 security-level 0
!
interface GigabitEthernet0/2
 bridge-group 1
 nameif inside
 security-level 100
!
interface GigabitEthernet0/3
 nameif dmz
 security-level 50
!
interface GigabitEthernet0/4
 shutdown
 no nameif
 no security-level
!
interface GigabitEthernet0/5
 shutdown
 no nameif
 no security-level
!
interface GigabitEthernet0/6
 shutdown
 no nameif
 no security-level
!
interface GigabitEthernet0/7
 shutdown
 no nameif    
 no security-level
!
interface Management0/0
 management-only
 shutdown
 no nameif
 no security-level
!
interface BVI1
 ip address 192.168.1.250 255.255.255.0 
!
ftp mode passive
access-list 101 extended permit ip any any 
pager lines 24
mtu outside 1500
mtu inside 1500
mtu dmz 1500
no failover
no monitor-interface service-module 
icmp unreachable rate-limit 1 burst-size 1
no asdm history enable
arp timeout 14400
no arp permit-nonconnected
arp rate-limit 16384
access-group 101 in interface outside
access-group 101 in interface inside
access-group 101 out interface inside
route outside 0.0.0.0 0.0.0.0 192.168.1.1 1
timeout xlate 3:00:00
timeout pat-xlate 0:00:30
timeout conn 1:00:00 half-closed 0:10:00 udp 0:02:00 sctp 0:02:00 icmp 0:00:02
timeout sunrpc 0:10:00 h323 0:05:00 h225 1:00:00 mgcp 0:05:00 mgcp-pat 0:05:00
timeout sip 0:30:00 sip_media 0:02:00 sip-invite 0:03:00 sip-disconnect 0:02:00
timeout sip-provisional-media 0:02:00 uauth 0:05:00 absolute
timeout tcp-proxy-reassembly 0:01:00
timeout floating-conn 0:00:00
timeout conn-holddown 0:00:15
timeout igp stale-route 0:01:10
user-identity default-domain LOCAL
aaa authentication login-history
no snmp-server location
no snmp-server contact
crypto ipsec security-association pmtu-aging infinite
crypto ca trustpool policy
telnet timeout 5
ssh stricthostkeycheck
ssh timeout 5
ssh key-exchange group dh-group1-sha1
console timeout 0
threat-detection basic-threat
threat-detection statistics access-list
no threat-detection statistics tcp-intercept
dynamic-access-policy-record DfltAccessPolicy
!
class-map inspection_default
 match default-inspection-traffic
!
!
policy-map type inspect dns preset_dns_map
 parameters
  message-length maximum client auto
  message-length maximum 512
  no tcp-inspection
policy-map global_policy
 class inspection_default
  inspect dns preset_dns_map 
  inspect ftp 
  inspect h323 h225 
  inspect h323 ras 
  inspect rsh 
  inspect rtsp 
  inspect esmtp 
  inspect sqlnet 
  inspect skinny  
  inspect sunrpc 
  inspect xdmcp 
  inspect sip  
  inspect netbios 
  inspect tftp 
  inspect ip-options 
!
service-policy global_policy global
prompt hostname context 
Cryptochecksum:64393ce4116833231dcbc776043b10cf
: end