Avaya Configuring IP Services Manual do Utilizador descarregar pdf (Página 49)

100

101

Configuring IP Routers and Interfaces

2-21

RIPSO Example

The router in Figure 2-7 has RIPSO conﬁgured on all three IP interfaces. The

security ranges speciﬁed for each interface vary, as shown. (For simplicity, this

example assumes that none of the interfaces requires any authority ﬂags on

inbound and outbound trafﬁc, but any ﬂags that are present are acceptable.)

When host 1.1.0.1 broadcasts an all-subnets broadcast IP datagram with the

security-level classiﬁcation set to Secret, the router compares the datagram’s

classiﬁcation with the range conﬁgured on inbound interface 1.1.0.2. Because

Secret is within the range conﬁgured on the interface, the router accepts the

datagram. In order to forward the datagram, the router does the following:

• Compares the datagram’s security level, Secret, to the security-level ranges

conﬁgured on interface 1.2.0.2 and 1.3.0.2

• Forwards the datagram on interface 1.2.0.2, because Secret is within the

security range conﬁgured on the interface

• Does not forward the datagram on interface 1.3.0.2, because Secret is outside

of the security range conﬁgured on the interface

Figure 2-7. RIPSO Network

1.1.0.1

1.1.0.2

1.2.0.1 1.3.0.1

Forward outbound

datagram? Yes

Forward outbound

datagram? No

Accept inbound datagram? Yes

1.2.0.2 1.3.0.2

Secret IP Data...

IP Datagram

Min. Security Max. Security

Interface Classification Classification

1.1.01 Unclassified Top secret

1.2.02 Secret Top secret

1.3.0.2 Top secret Top secret

1 2 ... 44 45 46 47 48 49 50 51 52 53 54 ... 465 466

Comentários a estes Manuais

Sem comentários

Avaya Configuring IP Services Manual do Utilizador Página 49

Comentários a estes Manuais

Manuais e produtos relacionados com Software Avaya Configuring IP Services