静态IP
接口配置
interface Ethernet0/0
nameif outside
security-level 0
ip address 192.168.1.189 255.255.255.0
!
interface Ethernet0/1
nameif inside
security-level 100
ip address 10.10.0.1 255.255.255.0
!
对内网外网定义acl,并应用到inside和outside上
access-list 100 extended permit icmp any any
access-list 100 extended permit ip any any
access-list 110 extended permit ip any any
global (outside) 1 interface
nat (inside) 1 0.0.0.0 0.0.0.0
access-group 100 in interface outside
access-group 110 in interface inside
route outside 0.0.0.0 0.0.0.0 192.168.1.1 1
pppoe
vpdn group pppoe dialout pppoe
vpdn group pppoe localname 51655177
vpdn group pppoe ppp authentication pap/chap
vpdn username 51655177 password 123456
dhcpd auto_config outside
DHCP配置
dhcpd address 172.16.0.1-172.16.0.128 inside10
dhcpd dns 202.106.0.20 8.8.8.8 interface inside10
dhcpd lease 7200 interface inside10
dhcpd option 3 ip 172.16.0.240 interface inside
dhcpd enable inside