配置PIX 的几个基本命令
interface
nameif
ip address
nat
global
route
interface命令
interface hardware_id hardware_speed [shutdown]
举例：
interface ethernet0 100full
interface ethernet1 100full
interface ethernet2 100full
nameif命令
nameif hardware_id if_name security_level
举例：
nameif ethernet0 outside security0
nameif ethernet1 inside security100
nameif ethernet2 dmz security20
ip address命令
ip address if_name ip_address [netmask]
举例：
ip address inside 10.10.10.14 255.255.255.0
nat命令
nat (if_name) nat_id local_ip [netmask]
举例：
nat (inside) 1 10.10.10.0 255.255.255.0
nat (inside) 1 172.16.1.0 255.255.255.0
global命令
global (if_name) nat_id global_ip | global_ip-global_ip [netmask]
举例：
nat (inside) 1 10.0.0.0 255.0.0.0
global (outside) 1 192.168.10.15-192.168.1.62 netmask 255.255.255.0
global (outside) 1 192.168.10.65 netmask 255.255.255.0
route命令
route if_name ip_address netmask gateway_ip [metric]
举例：
route outside 0.0.0.0 0.0.0.0 192.168.1.3 1
测试，允许ping到外网口
icmp permit any any outside
