天下网吧 >> 网吧方案 >> 方案分析 >> 正文

在pix或asa如何防止内网用户乱改ip配置案例

nded deny tcp any any eq 1863

access-list inside_access_in extended permit ip host lixiaoliang host 211.147.77.98

access-list inside_access_in extended permit ip host qizuomeng host 211.147.77.98

access-list inside_access_in extended permit ip object-group worktime any time-range worktime

access-list inside_access_in extended permit ip host ibm235 any time-range worktime inactive

****************************************************

access-list remote_splitTunnelAcl standard permit 10.64.64.0 255.255.240.0

access-list inside_nat0_outbound extended permit ip 10.64.64.0 255.255.240.0 1.1.1.0 255.255.255.0

access-list outside_cryptomap extended permit ip any 1.1.1.0 255.255.255.0

access-list caiwu_splitTunnelAcl standard permit 192.168.0.0 255.255.255.0

access-list outside_cryptomap_1 extended permit ip any 1.1.1.0 255.255.255.0

access-list dmz_nat0_outbound extended permit ip 192.168.0.0 255.255.255.0 1.1.1.0 255.255.255.0

pager lines 24

mtu outside 1500

mtu inside 1500

mtu dmz 1500

ip local pool remote 1.1.1.1-1.1.1.254 mask 255.255.255.0

ip local pool caiwu 2.2.2.1-2.2.2.254 mask 255.255.255.0

no failover

asdm image flash:/asdm.bin

no asdm history enable

把ip和mac绑定

****************************************************

arp inside 10.64.64.29 000f.b0d8.a504

arp inside 10.64.64.247 000b.2f04.7dd8

arp inside 10.64.64.169 0016.17f2.2eb3

arp inside lintao 000a.e6b2.c4c6

arp inside liuxuesong 00e0.4c58.b7cd

arp inside lishihai 000a.e69b.f4dc

arp inside ibm235 0009.6ba5.49c5

arp inside maxiaopeng 000c.764d.6aa8

arp inside xiaoguangyue 0011.09b4.6f25

arp inside zangdong 00e0.4cc1.2a14

arp inside wutao 0013.d47d.0c36

arp inside office-teacher 0090.9626.7da7

arp inside yangjin 00e0.4d01.6b1b

arp inside wangyuguo 00e0.4c21.471d

arp inside wangsishen 0015.c50f.92a5

arp inside yangliu 0015.f299.7f6c

arp inside jiling 00e0.4cc1.2a34

arp inside hujian 0011.252f.8613

arp inside ibm220 0002.556d.0037

arp inside jiachangjing 00e0.4d01.6b30

arp inside tanjun 0013.7222.5fe5

arp inside wangzhili 000d.6004.c197

arp inside lixiaoliang 0014.782f.b989

arp inside liuyongjun-ibm 0010.c6de.2686

arp inside lulianying 0016.3563.db1b

arp inside liuyongjun 0000.e25a.8580

arp inside lixuesong 0017.3152.8e78

a

本文来源:天下网吧 作者:网吧方案

相关文章
没有相关文章
声明
声明:本站所发表的文章、评论及图片仅代表作者本人观点,与本站立场无关。若文章侵犯了您的相关权益,请及时与我们联系,我们会及时处理,感谢您对本站的支持!联系Email:support@txwb.com,系统开号,技术支持,服务联系QQ:1175525021本站所有有注明来源为天下网吧或天下网吧论坛的原创作品,各位转载时请注明来源链接!
天下网吧·网吧天下