如何从外网telnet到pix

endy

    如何telnet到pix           可以从外网也可以从内网telnet到PIX上，从内网简单，不过从外网得作vpn，麻烦一些，也能用SSH 远程管理。
从内网telnet：
telnet 192.168.1.2 255.255.255.255 inside
从外网telnet:
Step 1 Set up IPSec by entering the following commands:
isakmp policy 10 authentication pre-share
isakmp policy 10 group 2
isakmp enable outside
crypto ipsec transform-set esp-des-md5 esp-des esp-md5-hmac
crypto dynamic-map dynmap 10 set transform-set esp-des-md5
crypto map mymap 10 ipsec-isakmp dynamic dynmap
crypto map mymap interface outside

Step 2 Set up an IP pool for the Telnet session by entering the following commands:
ip local pool tnpool 1.1.1.1-1.1.1.1

Step 3 Set up Telnet access by entering the following command:
telnet 1.1.1.1 255.255.255.255 outside
Step 4 Set up the VPN group for the remote Tel** by entering the following commands:
vpngroup telnet address-pool tnpool
vpngroup telnet password 12345678
sysopt connetion permit ipsec
Step 5 Setup the VPN client authentication by entering the following commands:
group telnet
password 12345678
ok,现在就可以从cisco client上telnet


     可以从外网也可以从内网telnet到PIX上，从内网简单，不过从外网得作vpn，麻烦一些，也能用SSH 远程管理。
从内网telnet：
telnet 192.168.1.2 255.255.255.255 inside
从外网telnet:
Step 1 Set up IPSec by entering the following commands:
isakmp policy 10 authentication pre-share
isakmp policy 10 group 2
isakmp enable outside
crypto ipsec transform-set esp-des-md5 esp-des esp-md5-hmac
crypto dynamic-map dynmap 10 set transform-set esp-des-md5
crypto map mymap 10 ipsec-isakmp dynamic dynmap
crypto map mymap interface outside

Step 2 Set up an IP pool for the Telnet session by entering the following commands:
ip local pool tnpool 1.1.1.1-1.1.1.1

Step 3 Set up Telnet access by entering the following command:
telnet 1.1.1.1 255.255.255.255 outside
Step 4 Set up the VPN group for the remote Tel** by entering the following commands:
vpngroup telnet address-pool tnpool
vpngroup telnet password 12345678
sysopt connetion permit ipsec
Step 5 Setup the VPN client authentication by entering the following commands:
group telnet
password 12345678
ok,现在就可以从cisco client上telnet

Dick

<p>最近SPOTO论坛 上有关技术的文章越来越多了</p><p>好现象</p><p>呵呵</p>

头点什么

<p><font color="#2222dd">顶，帖子不错``</font></p>

zplover

可以整理成原传文档，头点给一些帮助

luzongming

这个论坛很好！！！！

kid_15

好东西，顶下

mive

看看 多学习