cisco pix 515e 如何设置端口映射?

来源:百度知道 编辑:UC知道 时间:2024/05/13 10:24:07
比如:我的公网IP是:60.0.5.130.内网的里一台服务器地址:192.168.0.2.我想开通这台服务器的8080和2700端口,如何设置cisco pix 515e ?

access-list 101 permit ip host 10.10.10.100 any
access-list 101 permit tcp any host 公网IP eq www
alias (outside) 公网IP 10.10.10.100 255.255.255.255
alias (inside) 10.10.10.100 公网IP 255.255.255.255
static (inside,outside) 公网IP 10.10.10.100 netmask 255.255.255.255 0 0
access-group 101 in interface outside
补充别忘记做nat

access-list 101 permit ip host 10.10.10.100 any
access-list 101 permit tcp any host 公网IP eq www
alias (outside) 公网IP 10.10.10.100 255.255.255.255
alias (inside) 10.10.10.100 公网IP 255.255.255.255
static (inside,outside) 公网IP 10.10.10.100 netmask 255.255.255.255 0 0
access-group 101 in interface outside