路由器的网络地址转换、管理登陆限制、MAC与IP的绑定

来源:PCdog收集整理 作者: 2005-10-22 出处:pcdog.com

access  arp  ssl  地址转换  网络地址  

  interface FastEthernet0/0
  ip address 10.1.5.130 255.255.255.252
  ip access-group 102 in
  ip access-group 105 out
  ip nat outside
  duplex auto
  speed auto
  !
  interface FastEthernet0/1
  ip address 158.88.0.254 255.255.0.0
  ip access-group 102 in
  ip nat inside
  speed auto
  full-duplex
  !
  ip nat pool globalpool 10.1.5.130 10.1.5.130 netmask 255.255.255.252
  ip nat inside source list 1 pool globalpool overload
  ip classless
  ip route 0.0.0.0 0.0.0.0 10.1.5.129
  no ip http server
  ip pim bidir-enable
  !
  logging trap debugging
  logging 158.88.0.224
  logging 158.88.0.222
  access-list 1 permit 158.88.0.222
  access-list 1 permit 158.88.0.223
  access-list 1 permit 158.88.0.224
  access-list 1 permit 158.88.0.2
  access-list 1 permit 158.88.0.1
  access-list 1 permit 158.88.0.15
  access-list 1 permit 158.88.0.18
  access-list 1 permit 158.88.0.28
  access-list 1 permit 158.88.0.48
  access-list 102 permit tcp host 158.88.0.222 host 158.88.0.254 eq telnet
  access-list 102 deny tcp any host 158.88.0.254 eq telnet
  access-list 102 deny tcp any host 10.1.5.130 eq telnet
  access-list 102 permit ip any any
  arp 158.88.0.222 0002.3f70.4116 ARPA
  arp 158.88.0.223 0004.2306.601d ARPA
  arp 158.88.0.224 0050.ba7c.adcd ARPA
  arp 158.88.0.224 0050.ba7c.adcd ARPA
  arp 158.88.0.2 0001.0345.f79f ARPA
  arp 158.88.0.1 0004.2306.6062 ARPA
  arp 158.88.0.15 0004.2310.6aa0 ARPA
  arp 158.88.0.18 0004.2306.6078 ARPA
  arp 158.88.0.28 0004.2307.2a82 ARPA
  arp 158.88.0.48 0004.2306.d10d ARPA
  !
  line con 0
  password 7 120F0A1F1B0F09142B
  line 33 48
  line aux 0
  password 7 07192E44470D1C1516
  line vty 0 4
  password 7 120F0A1F1B0F09142B
更多内容请看PCdog.com--Cisco路由器配置手册  OSPF路由协议  交换机与路由器密码恢复专题
上一篇:巧妙剖析日志—网络管理员的“四两拨千斤”
下一篇:分布式网络管理与维护