1. 常用技巧
Sh ru ntp查看与ntp有关的
Sh ru crypto 查看与vpn有关的
Sh ru | inc crypto 只是关健字过滤而已
2. 故障倒换
failover
failover lan unit primary
failover lan interface testint Ethernet0/3
fail...
目的：对192.168.57.0段用户限速30M（即下载速度30/8，上传同），192.168.57.1和192.168.57.127除外access-list rate-limiting extended deny ip any 192.168.57.1 255.255.255.255access-list rate-limiting ...
配置等级策略，保证outside端口可以访问inside端口
access-list 100 extended permit icmp any any
access-list 100 extended permit ip any any
access-group 100 in interface outside
做PAT：
object network nat...
