ASA842配置内网DNS欺骗测试

1.测试拓扑：

源需求贴：http://bbs.51cto.com/thread-939762-1.html

2.基本配置：

R1：

interface FastEthernet0/0

ip address 10.1.1.1 255.255.255.0

no shut

ip route 0.0.0.0 0.0.0.0 10.1.1.10

R2:

interface FastEthernet0/0

ip address 10.1.1.2 255.255.255.0

no shut

ip route 0.0.0.0 0.0.0.0 10.1.1.10

ASA842:

interface G0

nameif inside

security-level 100

ip address 10.1.1.10 255.255.255.0

no shut

interface G1

nameif outside

security-level 0

ip address 202.100.1.10 255.255.255.0

no shut

route outside 0 0 202.100.1.3

policy-map global_policy

class inspection_default

inspect icmp

返回栏目页：http://www.bianceng.cnhttp://www.bianceng.cn/Servers/DNS/