Shulou(Shulou.com)06/02 Report--

Think

Road

And

Real

Check

Step

Sudden

1. Obtain the public network configuration via the private network:

Ciscoasa (config) # int G0

Ciscoasa (config-if) # no shutdown

Ciscoasa (config-if) # nameif inside

Ciscoasa (config-if) # ip add 192.168.1.254 255.255.255.0

Ciscoasa (config-if) # security-level 150

Ciscoasa (config-if) # security-level 100

Ciscoasa (config) # int G1

Ciscoasa (config-if) # no shutdown

Ciscoasa (config-if) # nameif outside

Ciscoasa (config-if) # ip add 200.8.6 255.255.255.248

Ciscoasa (config-if) # security-level 0

Ciscoasa (config) # int G2

Ciscoasa (config-if) # no shutdown

Ciscoasa (config-if) # nameif

Ciscoasa (config-if) # nameif DMZ

Ciscoasa (config-if) # no shutdown

Ciscoasa (config-if) # ip add 192.168.3.254 255.255.255.0

Ciscoasa (config-if) # security-level 50

Ciscoasa (config) # route inside 10.2.2.0 255.255.255.0 192.168.1.1

Ciscoasa (config) # route inside 10.1.1.0 255.255.255.0 192.168.1.1

[r1] int g0/0/0

[r1-GigabitEthernet0/0/0] ip add 10.1.1.254 24

[r1-GigabitEthernet0/0/0] q

[r1] int g0/0/1

[r1-GigabitEthernet0/0/1] ip add 10.2.2.254 24

[r1-GigabitEthernet0/0/1] q

[r1] int g0/0/2

[r1-GigabitEthernet0/0/2] ip add 192.168.1.1 24

[r1-GigabitEthernet0/0/2] q

[r1] ip route-static 0.0.0.0 0.0.0.0 192.168.1.254

2. Configure SSH access

Ciscoasa (config) # hostname asa842

Asa842 (config) # domain-name asadomain.com

Asa842 (config) # crypto key generate rsa modulus 1024 / / generates a RSA key pair. The length of the key is 1024 bits by default.

Do you really want to replace them? [yes/no]: yes

Keypair generation process begin. Please wait...

Asa842 (config) # ssh 0 0 outside

Asa842 (config) # username ssh password cisco

Asa842 (config) # aaa authentication ssh console LOCA

III. PC configuration

4. Configure ASDM access

Sa842 (config) # http server enable / / enable HTTPS service

Asa842 (config) # http 0 0 outside / / allows management through https from the outside interface

Asa842 (config) # asdm image disk0:/asdm-649.bin / / provides the client to download ASDM software

Asa842 (config) # username cisco password cisco privilege 15 / / permission 15 is the administrator's limit, default is 1

five。 Verify access through https://200.8.8.6

Install softwar

Ask

Title

And

Points

Analysis

To put it simply, SSH is a network protocol that is used for encrypted login between computers.

If a user logs in to another remote computer from the local computer using the SSH protocol, we can assume that the login is secure and that the password will not be disclosed even if intercepted halfway.

Welcome to subscribe "Shulou Technology Information " to get latest news, interesting things and hot topics in the IT industry, and controls the hottest and latest Internet news, technology news and IT industry trends.