SSH.ASDM：远程管理

思

路

及

实

验

步

骤

一．内网获取外网配置：

ciscoasa(config)# int g0

ciscoasa(config-if)# no shutdown

ciscoasa(config-if)# nameif inside

ciscoasa(config-if)# ip add 192.168.1.254 255.255.255.0

ciscoasa(config-if)# security-level 150

ciscoasa(config-if)# security-level 100

ciscoasa(config)# int g1

ciscoasa(config-if)# no shutdown

ciscoasa(config-if)# nameif outside

ciscoasa(config-if)# ip add 200.8.8.6 255.255.255.248

ciscoasa(config-if)# security-level 0

ciscoasa(config)# int g2

ciscoasa(config-if)# no shutdown

ciscoasa(config-if)# nameif

ciscoasa(config-if)# nameif DMZ

ciscoasa(config-if)# no shutdown

ciscoasa(config-if)# ip add 192.168.3.254 255.255.255.0

ciscoasa(config-if)# security-level 50

ciscoasa(config)# route inside 10.2.2.0 255.255.255.0 192.168.1.1

ciscoasa(config)# route inside 10.1.1.0 255.255.255.0 192.168.1.1

[r1]int g0/0/0

[r1-GigabitEthernet0/0/0]ip add 10.1.1.254 24

[r1-GigabitEthernet0/0/0]q

[r1]int g0/0/1

[r1-GigabitEthernet0/0/1]ip add 10.2.2.254 24

[r1-GigabitEthernet0/0/1]q

[r1]int g0/0/2

[r1-GigabitEthernet0/0/2]ip add 192.168.1.1 24

[r1-GigabitEthernet0/0/2]q

[r1]ip route-static 0.0.0.0 0.0.0.0 192.168.1.254

二．配置SSH接入

ciscoasa(config)# hostname asa842

asa842(config)# domain-name asadomain.com

asa842(config)# crypto key generate rsa modulus 1024 //生成RSA密钥对，密钥的长度默认是1024位

Do you really want to replace them? [yes/no]: yes

Keypair generation process begin. Please wait...

asa842(config)# ssh 0 0 outside

asa842(config)# username ssh password cisco

asa842(config)# aaa authentication ssh console LOCA

三．PC机配置

四．配置ASDM接入

sa842(config)# http server enable //启用HTTPS服务

asa842(config)# http 0 0 outside // 允许从outside接口 通过https管理

asa842(config)# asdm image disk0:/asdm-649.bin //提供客户端下载 ASDM软件

asa842(config)# username cisco password cisco privilege 15 //权限15为管理员权 限，默认为1

五.验证通过https://200.8.8.6访问

安装软件