Cisco PIX-515-RPS - PIX 515-R - Firewall Uživatelský manuál stáhnout pdf (Strana 12)

Cisco PIX Security Appliance Release Notes Version 7.2

OL-10104-01

New Features

that is unidirectionally authenticated. An XAUTH exchange then authenticates the remote VPN user. This

extended authentication can use any one of the supported authentication methods. Hybrid XAUTH

allows you to use digital certificates for security appliance authentication and a different method for

remote VPN user authentication, such as RADIUS, TACACS+ or SecurID.

IPsec Fragmentation and Reassembly Statistics

You can monitor additional IPsec fragmentation and reassembly statistics that help to debug

IPsec-related fragmentation and reassembly issues. The new statistics provide information about

fragmentation and reassembly both before and after IPsec processing.

Network Integration

This section includes the following topics:

• PPPoE Client, page 12

• Dynamic DNS Support, page 12

• Multicast Routing Enhancements, page 13

• Private and Automatic MAC Address Assignments and Generation for Multiple Context Mode,

page 13

• Expanded DNS Domain Name Usage, page 13

PPPoE Client

Point-to-Point Protocol over Ethernet (PPPoE) combines two widely accepted standards, Ethernet and

PPP, to provide an authenticated method of assigning IP addresses to client systems. PPPoE clients are

typically personal computers connected to an ISP over a remote broadband connection, such as DSL or

cable service. ISPs deploy PPPoE because it supports high-speed broadband access using their existing

remote access infrastructure and because it is easier for customers to use.

For more information, see the “Configuring the PPPoE Client” section in the Cisco Security Appliance

Command Line Configuration Guide. For a complete description of the command syntax, see the Cisco

Security Appliance Command Reference.

Dynamic DNS Support

You can create dynamic DNS (DDNS) update methods and configure them to update the Resource

Records (RRs) on the DNS server at whatever frequency you need.

DDNS complements DHCP, which enables users to dynamically and transparently assign reusable IP

addresses to clients. DDNS then provides dynamic updating and synchronizing of the name to the address and

the address to the name mappings on the DNS server. With this version, the security appliance supports the

IETF standard for DNS record updates.

For more information, see the “Configuring DHCP and DDNS Services” section in the Cisco Security

Appliance Command Line Configuration Guide. For a complete description of the command syntax, see

the Cisco Security Appliance Command Reference.

1 2 ... 7 8 9 10 11 12 13 14 15 16 17 ... 27 28

Žádné komentáře

Cisco PIX-515-RPS - PIX 515-R - Firewall Uživatelský manuál Strana 12