정보보안 네트워크ASA방화벽 1부

학습주제 1 네트워크 망을 만들 수 있다 2 라우터 설정을 할 수 있다 3 ASA방화벽(inside 에서 outside로 연결할 수 있다) 한방설정 en password: [enter] #초기암호는 없습니다 show running-config config t interface gigabitethernet1/1 nameif outside security-level 0 ip address 1 213 251 50 255 255 255 0 no shutdown config t interface gigabitethernet1/2 nameif inside security-level 100 ip address 192 168 100 254 255 255 255 0 no shutdown interface gigabitethernet1/3 nameif dmz security-level 50 ip address 10 10 10 254 255 255 255 0 no shutdown exit ------------------------------------------------------- dhcpd address 192 168 100 11-192 168 100 30 Inside dhcpd enable inside --------------------------------------------------- rna(routing,nat,access) config t route outside 0 0 0 0 0 0 0 0 1 213 251 254 ---------------------------------------------------- object network in2out subnet 192 168 100 0 255 255 255 0 nat (inside,outside) dynamic interface exit ---------------------------------------------------- config t access-list out2in extended permit ip any any access-list out2in extended permit tcp any any access-list out2in extended permit udp any any access-group out2in in interface outside ----------------------------------------------------- 참고도서 패킷트레이서를 이용한 네트워크 입문(05장 방화벽과 보안편) / 인피니티북스(조태남,이성원)