Shulou(Shulou.com)06/01 Report--

ASA 5505 ASA 5510 SME

5520 5540 5550 5580 large enterprises

ASA is a Cisco product, formerly known as PIX.

ASA basic configuration command

Command name

Pattern

Specific command

Modify the firewall name

Config#

Hostname xxxx

Configure privileged password

Config#

Enable password xxxx

Remote login password

Config#

Password xxxx

Configure the interface name

Config-if #

Nameif xxxx

Configure the interface security level

Config-if #

Ecurity-level xxxx (0-100)

Basic configuration of ASA ACL

Standard ACL

Asa (config) # access-group acl_name {in | out} interface interface_ name

Extended ACL

Asa (config) # access-list acl_name [extended] {permit | deny} protocol src_ip_addr src_mask dst_ip_addr dst_mask [operator port]

Apply ACL to an interface

Asa (config) # access-group acl_name {in | out} interface interface_ name

Example: allow ICMP to pass through the firewall

Asa (config) # access-list 111permit icmp any any

Asa (config) # access-group 111in int outside

Static rout

Asa (config) # route interface-name network mask next-hop-address

Other commands

Command name

Pattern

Specific command

Save running config configuration

Config#

Asa# write memory or

Asa# copy running-config startup-config

Clear all configurations for running config

Config#

Clear configure all

Clears the configuration of specified commands in running config

Config#

Asa (config) # clear config configcommand [level2configcommand]

For example, clear all ACL

Clear configure access-list

Clears the specified ACL in_to_out

Clear configure access-list in_to_out

Delete startup-config profile

#

Asa# write erase

Welcome to subscribe "Shulou Technology Information " to get latest news, interesting things and hot topics in the IT industry, and controls the hottest and latest Internet news, technology news and IT industry trends.