PIX防火墙配置及交换机的捆绑和热备份配置

PIX配置

hostname PIX
interface e0 100full
interface e1 100full
ip add inside 192.168.1.10 255.255.255.0
ip add outside 100.1.1.10 255.255.255.0
route outside 0.0.0.0 0.0.0.0 100.1.1.1
router ospf 10
router-id 10.10.10.10
network 192.168.1.0 255.255.255.0 a 0
default-information originate always
nat (inside) 1 192.168.1.0 255.255.255.0
global (outside) 1 100.1.1.90-100.1.1.91
global (outside) 1 in interface
static (inside,outside) 100.1.1.2 172.16.1.2
static (inside,outside) tcp 100.1.1.3 80 10.1.1.3 80
static (inside,outside) tcp 100.1.1.10 23 192.168.1.2 23
access-list out permit tcp any host 100.1.1.3 eq 80
access-list out permit icmp host 200.1.1.4 any
access-list out permit icmp any any echo-reply
access-list out permit tcp host 100.1.1.1 host 100.1.1.10 eq 23
access-group out in interface outside

交换机捆绑配置

int e0
channel-group 1 mode on
int e1
channel-group 1 mode on

int port-channel 1

热备份配置

interface e2
ip add 192.168.1.2 255.255.255.0
standby 1 ip 192.168.1.1
standby 1 priority 110
standby 1 preempt

interface e3
ip add 192.168.1.3 255.255.255.0
standby 1 ip 192.168.1.1
standby 1 priority 110
standby 1 preempt