CCSP/CCVP --ASA 5520配置例子

　　same-security-traffic permit inter-interface

　　same-security-traffic permit intra-interface

　　object-group icmp-type icmp_echo_request

　　icmp-object echo

　　object-group icmp-type icmp_echo_reply

　　object-group network h_china_ntpserver

　　network-object host 202.108.158.139

　　object-group network h_auth42

　　network-object host 172.26.31.42

　　network-object host 172.26.24.19

　　object-group network N_RFC1918

　　network-object 10.0.0.0 255.0.0.0

　　network-object 172.16.0.0 255.240.0.0

　　network-object 192.168.0.0 255.255.0.0

　　object-group network n_VLAN108_16

　　network-object 172.26.16.0 255.255.255.0

　　object-group network n_VLAN105_22

　　network-object 172.26.22.0 255.255.255.0

　　object-group network n_VLAN106_25

　　network-object 172.26.25.0 255.255.255.0

　　object-group network n_VLAN163_31

　　network-object 172.26.31.0 255.255.255.0

　　object-group network n_VLAN108_18

　　network-object 172.26.18.0 255.255.255.0

　　object-group network N_RDCA_S_C

　　group-object n_VLAN108_18

　　group-object n_VLAN108_16

　　group-object n_VLAN105_22

　　object-group service tcp_http tcp

　　port-object eq www

　　object-group service tcp_https tcp

　　port-object eq https

　　object-group service tcp_telnet tcp

　　port-object eq telnet

　　object-group service TCP_client_auth tcp