天下网吧 >> 网吧方案 >> 方案分析 >> 正文

在pix或asa如何防止内网用户乱改ip配置案例

*************************

object-group network www

 network-object host xingzhonghe

 network-object host chengxiaojie

 network-object host dhcp

 network-object host liuxuesong

 network-object host wangzhili

 network-object host liuyongjun

 network-object host liuyongjun-ibm

 network-object host lulianying

 network-object host chufw

 network-object host jiachangjing

 network-object host maxiaopeng

 network-object host 10.64.64.255

object-group network guest

 network-object 10.64.66.112 255.255.255.240

object-group network caiwu

 network-object 10.64.66.0 255.255.255.224

object-group service netmeeting tcp

 port-object range 1503 1503

 port-object range h323 h323

object-group network worktime

 network-object host wutao

 network-object host zhangyi

 network-object host yangliu

 network-object host wangsishen

 network-object host wangyuguo

 network-object host 10.64.64.169

 network-object host 10.64.64.18

 network-object host machi

 network-object host lintao

 network-object host liuxuesong

 network-object host lixuesong-dell

 network-object host 10.64.64.247

 network-object host 10.64.64.29

 network-object host 10.64.64.30

 network-object host yangjin

 network-object host lishihai

 network-object host 10.64.64.55

 network-object host jiling

 network-object host office-teacher

****************************************************

access-list outside_access_in extended permit icmp any any echo-reply

access-list outside_access_in extended permit tcp any any object-group netmeeting

调用上述的object-group到acl

****************************************************

上一页  [1] [2] [3] [4] 下一页

access-list inside_access_in extended deny ip any 192.168.0.0 255.255.255.0

access-list inside_access_in extended permit ip object-group caiwu 192.168.0.0 255.255.255.0

access-list inside_access_in extended permit ip object-group www any

access-list inside_access_in extended permit ip object-group guest any inactive

access-list inside_access_in exte

本文来源:天下网吧 作者:网吧方案

相关文章
没有相关文章
声明
声明:本站所发表的文章、评论及图片仅代表作者本人观点,与本站立场无关。若文章侵犯了您的相关权益,请及时与我们联系,我们会及时处理,感谢您对本站的支持!联系Email:support@txwb.com,系统开号,技术支持,服务联系QQ:1175525021本站所有有注明来源为天下网吧或天下网吧论坛的原创作品,各位转载时请注明来源链接!
天下网吧·网吧天下