Security

IzzyMenu.com

SECURITY 관련 자료 강의 자료

로그인 회원가입

[FWSM] IOS UPGRADE

ANTON

2011-03-12 21:34:02, 조회 : 181, 추천 : 50

conf t
Enter configuration commands, one per line.  End with CNTL/Z.
JEJU_P1(config)#vlan 20
JEJU_P1(config-vlan)#exit
JEJU_P1(config)#int vlan 20
JEJU_P1(config-if)#ip add 192.168.90.2 255.255.255.0
JEJU_P1(config-if)#no sh
JEJU_P1(config-if)#no shutdown
JEJU_P1(config-if)#exit
JEJU_P1(config)#int fa3/13
JEJU_P1(config-if)#sw mo ac
JEJU_P1(config-if)#sw ac vlan
% Incomplete command.

JEJU_P1(config-if)#sw ac vlan 20
JEJU_P1(config-if)#exit

Mod Ports Card Type                              Model              Serial No.
--- ----- -------------------------------------- ------------------ -----------
  3   48  SFM-capable 48-port 10/100 Mbps RJ45   WS-X6548-RJ-45     SALXXX0AFB2
  5    2  Supervisor Engine 720 (Active)         WS-SUP720-3B       SALXXXHN13
  6    6  Firewall Module                        WS-SVC-FWM-1       SADXXX0BBN

Mod MAC addresses                       Hw    Fw           Sw           Status
--- ---------------------------------- ------ ------------ ------------ -------
  3  001a.2f57.fc90 to 001a.2f57.fcbf   7.1   6.3(1)       8.6(0.434)BA Ok
  5  0017.5a34.f454 to 0017.5a34.f457   4.6   8.4(2)       12.2(33)SRB5 Ok
  6  0013.7fee.2664 to 0013.7fee.266b   3.0   7.2(1)       3.2(5)       Ok

Mod  Sub-Module                  Model              Serial       Hw     Status
---- --------------------------- ------------------ ----------- ------- -------
  5  Policy Feature Card 3       WS-F6K-PFC3B       SAL1013H81T  2.2    Ok
  5  MSFC3 Daughterboard         WS-SUP720          SAL1013HGFW  2.7    Ok

Mod  Online Diag Status
---- -------------------
  3  Pass
  5  Pass
  6  Pass
JEJU_P1#sess slot 6 proc 1
The default escape character is Ctrl-^, then x.
You can also type 'exit' at the remote prompt to end the session
Trying 127.0.0.61 ... Open

User Access Verification

Password:
Type help or '?' for a list of available commands.

FWSM> en
Password: *****
Invalid password
Password:

FWSM# sh run
: Saved
:
FWSM Version 3.2(5)
!
hostname FWSM
enable password XXX encrypted
names
!
interface Vlan20
nameif inside
security-level 100
ip address 192.168.90.2 255.255.255.0
!
passwd XXXU encrypted
ftp mode passive
pager lines 24
mtu inside 1500
no failover
no asdm history enable
arp timeout 14400
nat-control
timeout xlate 3:00:00
timeout conn 1:00:00 half-closed 0:10:00 udp 0:02:00 icmp 0:00:02
timeout sunrpc 0:10:00 h323 1:00:00 h225 1:00:00 mgcp 0:05:00
timeout mgcp-pat 0:05:00 sip 0:30:00 sip_media 0:02:00
<--- More --->

timeout sip-invite 0:03:00 sip-disconnect 0:02:00
timeout uauth 0:05:00 absolute
no snmp-server location
no snmp-server contact
snmp-server enable traps snmp authentication linkup linkdown coldstart
telnet timeout 5
ssh timeout 5
console timeout 0
!
class-map inspection_default
match default-inspection-traffic
!
!
policy-map global_policy
class inspection_default
  inspect dns maximum-length 512
  inspect ftp
  inspect h323 h225
  inspect h323 ras
  inspect netbios
  inspect rsh
  inspect skinny
  inspect smtp
  inspect sqlnet
<--- More --->


FWSM# conf t

FWSM(config)# int vlan 20

FWSM(config-if)# nameif inside

FWSM(config-if)# security

FWSM(config-if)# security-level 100

FWSM(config-if)# ip add 192.168.90.1 255.255.255.0

FWSM(config-if)# no sh

FWSM(config-if)# no shuu tdown

FWSM(config-if)# exit

FWSM(config)# icmp permit any inside

FWSM(config)# Access Rules Download Complete: Memory Utilization: < 1%
exit

FWSM# ping 192.168.90.2
Sending 5, 100-byte ICMP Echos to 192.168.90.2, timeout is 2 seconds:
!!!!!
Success rate is 100 percent (5/5), round-trip min/avg/max = 1/1/1 ms

FWSM# ping 192.168.90.3
Sending 5, 100-byte ICMP Echos to 192.168.90.3, timeout is 2 seconds:
!!!!!
Success rate is 100 percent (5/5), round-trip min/avg/max = 1/1/1 ms

FWSM# !192.168.90.3 is Station

FWSM# copy tftp:  flash:image
Address or name of remote host []? 192.168.90.3
Source filename []? c6svc-fwm-k9.3-2-11.bin
Destination filename [image]?

Accessing tftp://192.168.90.3/c6svc-fwm-k9.3-2-11.bin...!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!

추천하기

목록보기