ASA5510 (V8.4) PPPOE 拨号上网

设置Internet 接口:

interface Ethernet0/0
nameif outside
security-level 0
pppoe client vpdn group adsl -------------设置ADSL协议
ip address pppoe setroute -------------由ISP之间下发默认路由

配置Lan接口:
interface Ethernet0/1
nameif inside
security-level 100
ip address 192.168.10.1 255.255.255.0

设置PPPOE 拨号:

vpdn group adsl request dialout pppoe

ADSL 用户名,由ISP提供:

vpdn group adsl localname ad67338760 -------------- ad67338760 用户名

ADSL 用户名、密码,由ISP提供:

vpdn username ad67338760 password cisco store-local --------cisco 密码、ad67338760 用户名

ADSL协议设置:

vpdn group adsl ppp authentication pap

上网设置:

object network obj_any
subnet 0.0.0.0 0.0.0.0
nat (inside,outside) dynamic interface

或者

object network obj_any
subnet 192.168.10.0 255.255.255.0
nat (inside,outside) dynamic interface

开放ICMP列表:

access-list outside_in extended permit icmp any any

access-group outside_in in interface outside

远程管理SSH:

V8.4

username schh password cisco
ssh 0.0.0.0 0.0.0.0 outside
ssh timeout 5

V8.3

username schh password cisco
aaa authentication ssh console LOCAL
ssh 0.0.0.0 0.0.0.0 outside
ssh timeout 5

修改密码:

enable password cisco

VTY Password

passwd cisco

查看接口获得的IP:

ciscoasa# show int ip brief
Interface IP-Address OK? Method Status Protocol
Ethernet0/0 116.231.210.32 YES CONFIG up up
Ethernet0/1 192.168.10.1 YES CONFIG up up
Ethernet0/2 unassigned YES unset administratively down down
Ethernet0/3 unassigned YES unset administratively down down

以下链接是各种8.4 NAT设置方式

ASA8.4 NAT