I think my conifigure correct!!but ASDM can't open.my pc is ie6.0,java is install.inside interface ping is ok.user cisco asdm launcher display:"remote host closed connection during handshake".I user ie6.0 connection:https://155.222.2.109. I can open other firewall the ASDM on the FWSM.So i think my pc system request is OK!!
cisco# sh ver
Cisco PIX Security Appliance Software Version 7.2(1)
Device Manager Version 5.2(1)
Compiled on Wed 31-May-06 14:45 by root
System image file is "flash:/pix721.bin"
Config file at boot was "startup-config"
cisco up 29 secs
Hardware: PIX-525, 256 MB RAM, CPU Pentium III 600 MHz
Flash E28F128J3 @ 0xfff00000, 16MB
BIOS Flash AM29F400B @ 0xfffd8000, 32KB
Encryption hardware device : VAC (IRE2141 with 2048KB, HW:1.0, CGXROM:1.9, FW:6.5)
0: Ext: Ethernet0 : address is 0006.287c.dc33, irq 10
1: Ext: Ethernet1 : address is 0006.287c.dc34, irq 11
2: Ext: Ethernet2 : address is 00b4.0080.d29c, irq 5
3: Ext: Ethernet3 : address is 00d0.b784.8d35, irq 11
Licensed features for this platform:
Maximum Physical Interfaces : 10
Maximum VLANs : 100
Inside Hosts : Unlimited
Failover : Active/Active
VPN-DES : Disabled
VPN-3DES-AES : Disabled
Cut-through Proxy : Enabled
Guards : Enabled
URL Filtering : Enabled
Security Contexts : 2
GTP/GPRS : Disabled
VPN Peers : Unlimited
This platform has an Unrestricted (UR) license.
Serial Number: 405261952
Running Activation Key: 0x052a9ab5 0xbe9db24e 0x28cedada 0xf11f8236
Configuration has not been modified since last system restart.
cisco# sh run
: Saved
:
PIX Version 7.2(1)
!
hostname cisco
domain-name cisco.com
enable password xxx
names
!
interface Ethernet0
nameif outside
security-level 0
ip address 11.0.x.x.255.255.0
!
interface Ethernet1
nameif inside
security-level 100
ip address 155.222.x.x.255.255.0
!
interface Ethernet2
shutdown
no nameif
no security-level
no ip address
!
interface Ethernet3
shutdown
no nameif
no security-level
no ip address
!
passwd xxx
ftp mode passive
dns server-group DefaultDNS
domain-name cisco.com
access-list test extended permit ip any any
access-list icmp extended permit icmp any any
pager lines 24
mtu outside 1500
mtu inside 1500
no failover
asdm image flash:/asdm-521.bin
no asdm history enable
arp timeout 14400
access-group icmp in interface outside
route inside 155.0.0.0 255.0.0.0 155.222.2.254 1
timeout xlate 3:00:00
timeout conn 1:00:00 half-closed 0:10:00 udp 0:02:00 icmp 0:00:02
timeout sunrpc 0:10:00 h323 0:05:00 h225 1:00:00 mgcp 0:05:00 mgcp-pat 0:05:00
timeout sip 0:30:00 sip_media 0:02:00 sip-invite 0:03:00 sip-disconnect 0:02:00
timeout uauth 0:05:00 absolute
http server enable
http 155.0.0.0 255.0.0.0 inside
no snmp-server location
no snmp-server contact
snmp-server enable traps snmp authentication linkup linkdown coldstart
telnet 155.0.0.0 255.0.0.0 inside
telnet timeout 5
ssh timeout 5
console timeout 0
