Enterasys-networks XSR-3020 Manuale Utente Pagina 57
- Pagina / 110
- Indice
- SEGNALIBRI
Valutato. / 5. Basato su recensioni clienti
Firewall Sample Configuration
XSR Getting Started Guide 3-13
Figure 3-1 XSR with Firewall Topology
In this configuration, the firewall provides protected access from the private to dmz networks. That
is, access is restricted to Web and mail traffic only. The hosts in the private network are provided
full access to the Internet but access is denied from the Internet to the private network. Also, all Java
and ActiveX pages, IP options, IP broadcast and multicast packets are banned.
Begin by specifying network objects for private, dmz, and Mgmt networks:
XSR(config)#ip firewall network dmz 220.150.2.16 mask 255.255.255.240 internal
XSR(config)#ip firewall network private 220.150.2.32 mask 255.255.255.240
internal
XSR(config)#ip firewall network Mgmt 220.150.2.35 mask 255.255.255.0 internal
Log only critical events:
XSR(config)#ip firewall logging event-threshold 3
Set policies between the dmz and external networks. Note that policy objects and names are case-
sensitive and you must cite network names exactly:
XSR(config)#ip firewall policy a1 private dmz HTTP allow
XSR(config)#ip firewall policy a2 dmz private HTTP allow
XSR(config)#ip firewall policy a3 private dmz HTTP allow
XSR(config)#ip firewall policy a4 dmz private HTTP allow
Set the policies between the dmz and external networks:
XSR(config)#ip firewall policy a5 ANY_EXTERNAL dmz SMTP allow
XSR(config)#ip firewall policy a6 dmz ANY_EXTERNAL SMTP allow
XSR(config)#ip firewall policy a7 ANY_EXTERNAL dmz SMTP allow
XSR(config)#ip firewall policy a8 dmz ANY_EXTERNAL SMTP allow
Set policies to allow any traffic from private to external and Mgmt networks:
XSR(config)#ip firewall policy a9 private ANY_EXTERNAL ANY_TCP allow
XSR(config)#ip firewall policy Telnetsess Mgmt Mgmt Telnet allow bidirectional
Allow ICMP traffic to pass from the dmz to private, private to all external, and all external to private
networks:
XSR(config)#ip firewall filter allowICMP private dmz protocol-id 1
XSR(config)#ip firewall filter allowICMP private ANY_EXTERNAL protocol-id 1
XSR(config)#ip firewall filter allowICMP ANY_EXTERNAL dmz protocol-id 1
Internet
206.12.44.16/28
Frame Relay
FE2
FE1
220.150.2.32/28
220.150.2.37
220.150.2.36
220.150.2.35
220.150.2.16/28
220.150.2.17
DMZ
Internal
S1
Web server
(HTTP)
220.150.2.19
Mail server
(SMTP)
220.150.2.18
XSR-3020
- X-Pedition 1
- Security Router 1
- Industry Canada Notices 5
- Class A ITE Notice 5
- Clase A. Aviso de ITE 5
- Klasse A ITE Anmerkung 5
- orcontact 6
- (Circuit Modules) 7
- (Circuit Breakers) 7
- VCCI Notice 8
- BSMI EMC Statement — Taiwan 8
- Declaration of Conformity 8
- Australian Telecom 9
- Contents 13
- Appendix A: Specifications 15
- About This Guide 17
- Getting Help 19
- Overview 21
- PSTN (for PPP) 22
- ETH2ETH1 23
- Operating System 24
- Industry-common CLI 24
- IP Protocol 24
- IP Routing 25
- SNMP and Statistics Gathering 25
- Security 26
- Frame Relay 26
- System Description 27
- XSR Getting Started Guide 1-7 27
- Quality of Service (QoS) 28
- Virtual Private Network (VPN) 28
- GRE over IPSec 29
- Dial Service 30
- Dial Backup 30
- Installation Overview 31
- 1-12 Overview 32
- Hardware Installation 33
- 2-2 Hardware Installation 34
- XSR Getting Started Guide 2-3 35
- 2-4 Hardware Installation 36
- XSR Getting Started Guide 2-5 37
- 2-6 Hardware Installation 38
- Connecting Cables 39
- SECURITY ROUTERS 40
- XSR Getting Started Guide 2-9 41
- Figure 2-16 42
- Figure 2-18, respectively 43
- Software Configuration 44
- Initializing XSR Software 46
- 3-2 Software Configuration 46
- XSR Getting Started Guide 3-3 47
- Setting the Clock 51
- Configuring the LAN Ports 52
- Configuring the WAN Ports 52
- BRI Leased Line 53
- BRI Leased Frame Relay 53
- BRI Switched Line 54
- Firewall Sample Configuration 56
- Setting Up RIP Routing 58
- Configure OSPF Routing 59
- 3-16 Software Configuration 60
- Viewing Your Configuration 61
- 3-18 Software Configuration 62
- Site regional router 64
- Configure Users and Passwords 66
- Configure LAN Interface 66
- Configure Quality of Service 66
- Apply QoS 68
- Configure More Access Lists 68
- Configure DHCP/BOOTP Relay 69
- Configure SNMP 70
- Set Up IKE Phase I Security 71
- Create a Transform Set 72
- Configure Crypto Maps 72
- 3-30 Software Configuration 74
- XSR Rebooting Characteristics 76
- Reboot Triggers 77
- Cause Boot Type 77
- 3-34 Software Configuration 78
- Bootrom Monitor Mode Commands 79
- 3-36 Software Configuration 80
- 3-38 Software Configuration 82
- 3-40 Software Configuration 84
- 3-42 Software Configuration 86
- Specifications 87
- Short-haul MTRJ 88
- Pin 1 Pin 5 90
- Pin 6 Pin 9 90
- Pins not shown are unused 96
- RX In TX Out 99
- G.703 Balun 99
- Model 460 MC 99
- Regulatory/Safety Compliance 101
- ALARM LOS 101
- ENABLE LOF 101
- Port 0 Activation LED 102
- Port 1 Activation LED 102
- Pin 8Pin 1 102
- Transmit Pair Termination 103
- Port 0 Port 1 103
- Port 1Port 0 103
- Receive Pair Termination 103
- NIM1 NIM2 107
- LED State Function 108
- Index-2 110
Prodotti e manuali riguardandi Hardware Enterasys-networks XSR-3020
Hardware Enterasys-networks XSR-3150 Manuale Utente
(110 pagine)
(110 pagine)
Panasonic KXPRX150SP manuály
Uživatelské manuály a uživatelské příručky pro PDA Panasonic KXPRX150SP.
Poskytujeme 1 manuály pdf Panasonic KXPRX150SP ke stažení zdarma podle typů dokumentů: Uživatelský manuál
Commenti su questo manuale