一．内网获取外网配置： ciscoasa(config)# int g0 ciscoasa(config-if)# no shutdown ciscoasa(config-if)# nameif inside ciscoasa(config-if)# ip add 192.168.1.254 255.255.255.0 ciscoasa(config-if)# security-level 150 ciscoasa(config-if)# security-level 100 ciscoasa(config)# int g1 ciscoasa(config-if)# no shutdown ciscoasa(config-if)# nameif outside ciscoasa(config-if)# ip add 200.8.8.6 255.255.255.248 ciscoasa(config-if)# security-level 0 ciscoasa(config)# int g2 ciscoasa(config-if)# no shutdown ciscoasa(config-if)# nameif ciscoasa(config-if)# nameif DMZ ciscoasa(config-if)# no shutdown ciscoasa(config-if)# ip add 192.168.3.254 255.255.255.0 ciscoasa(config-if)# security-level 50 ciscoasa(config)# route inside 10.2.2.0 255.255.255.0 192.168.1.1 ciscoasa(config)# route inside 10.1.1.0 255.255.255.0 192.168.1.1 [r1]int g0/0/0 [r1-GigabitEthernet0/0/0]ip add 10.1.1.254 24 [r1-GigabitEthernet0/0/0]q [r1]int g0/0/1 [r1-GigabitEthernet0/0/1]ip add 10.2.2.254 24 [r1-GigabitEthernet0/0/1]q [r1]int g0/0/2 [r1-GigabitEthernet0/0/2]ip add 192.168.1.1 24 [r1-GigabitEthernet0/0/2]q [r1]ip route-static 0.0.0.0 0.0.0.0 192.168.1.254 二．配置SSH接入 ciscoasa(config)# hostname asa842 asa842(config)# domain-name asadomain.com asa842(config)# crypto key generate rsa modulus 1024 //生成RSA密钥对，密钥的长度默认是1024位 Do you really want to replace them? [yes/no]: yes Keypair generation process begin. Please wait... asa842(config)# ssh 0 0 outside asa842(config)# username ssh password cisco asa842(config)# aaa authentication ssh console LOCA 三．PC机配置 
四．配置ASDM接入 sa842(config)# http server enable //启用HTTPS服务 asa842(config)# http 0 0 outside // 允许从outside接口
通过https管理 asa842(config)# asdm image disk0:/asdm-649.bin //提供客户端下载
ASDM软件 asa842(config)# username cisco password cisco privilege 15 //权限15为管理员权
限，默认为1 五.验证通过https://200.8.8.6访问 
安装软件  
| 
