Avaya FireWall-1 Manual do Utilizador descarregar pdf (Página 48)

Configuring BaySecure FireWall-1

3-8

117384-D Rev 00

For example, the following command invokes the prompt for IP interface 2.2.2.2/

255.0.0.0 (which has been configured on Ethernet slot 2, connector 2):

ethernet/2/2# ip address 2.2.2.2 mask 255.0.0.0

ip/2.2.2.2/255.0.0.0#

Adding a Firewall to an Interface

When you add a firewall to an IP interface, the firewall is automatically enabled

on that interface. To add a firewall to an IP interface, enter:

firewall

The firewall prompt appears. For example, the following command adds a firewall

to the IP interface 2.2.2.2/255.0.0.0:

ip/2.2.2.2/255.0.0.0#

firewall

firewall/2.2.2.2#

Specifying a Firewall Name

Optionally, you can specify a firewall name to associate with the interface. To do

so, enter:

firewall-name

<name>

name

is any string of alphanumeric characters that you want to use to identify the

interface by name.

Note:

After you enable a firewall on an interface and reboot the router, you

can communicate with the router if you are connected to the console port

through a terminal server. However, if you use a Telnet connection to the router

(to issue Technician Interface commands), you cannot communicate with the

router until you change the FireWall-1 default security policy. For more

information, see “D

efining a Firewall Security Policy ” on page 3-10.

Caution:

If your firewall management station and router are on different

subnets, you will not be able to communicate with the router from the

management station unless you establish a static route from the management

station to the router before you activate the firewall. For information about

creating a static route, see Configuring IP, ARP, RIP, and OSPF Services.

1 2 ... 43 44 45 46 47 48 49 50 51 52 53 ... 67 68

Sem comentários

Avaya FireWall-1 Manual do Utilizador Página 48