Cisco PIX 525 Specifikace stáhnout pdf (Strana 73)

2-13

Cisco PIX Firewall and VPN Configuration Guide

78-15033-01

Chapter 2 Establishing Connectivity

Configuring the PIX Firewall for Routing

Another way to measure traffic is to back up your PAT address.

For example:

nat (inside) 1 10.1.0.0 255.255.0.0

global (outside) 1 209.165.200.225

global (outside) 1 192.168.1.1

In this example, two port addresses are configured for setting up PAT on hosts from the internal network

10.1.0.0/16 in global configuration mode.

Configuring the PIX Firewall for Routing

A route identifies the interface and router (gateway) to use to forward packets for a specific destination

network received by the PIX

Firewall. This section describes how to configure the PIX Firewall to

correctly route traffic to and from adjacent networks. It includes the following topics:

• Using RIP, page 2-13

• Configuring RIP Static Routes on PIX Firewall, page 2-14

• Using OSPF, page 2-15

• Configuring OSPF on the PIX Firewall, page 2-18

• Viewing OSPF Configuration, page 2-21

• Clearing OSPF Configuration, page 2-22

Using RIP

Each inside or perimeter PIX Firewall interface is configurable for route and Routing Information

Protocol (RIP) information. To determine what route information is required, consider what routers are

in use in your network and are adjacent to the planned installation point of the PIX

Firewall.

Specifying a route tells the PIX Firewall where to send information that is forwarded on a specific

interface and destined for a particular network address. You can specify more than one route per

interface, which lets you control where to send network traffic. Refer to the route command page in the

Cisco

PIX Firewall Command Reference for more information.

If the PIX Firewall has RIP enabled, it learns where everything is on the network by “passively” listening

for RIP network traffic. When the PIX

Firewall interface receives RIP traffic, the PIX Firewall updates

its routing tables. You can also configure the PIX

Firewall to broadcast an inside or perimeter interface

as a “default” route. Broadcasting an interface as a default route is useful if you want all network traffic

on that interface to go out through that interface. Refer to the rip command page in the

Cisco

PIX Firewall Command Reference for configuration information.

When defining a route, specify the IP address and network mask for the destination network. Use 0.0.0.0

as the default value for both the IP address and network mask when defining a default route.

The gateway IP address is the router that routes the traffic to the destination network IP address.

RIP configuration specifies whether the PIX Firewall updates its routing tables by passive listening to

RIP traffic, and whether the interface broadcasts itself as a default route for network traffic on that

interface.

1 2 ... 68 69 70 71 72 73 74 75 76 77 78 ... 465 466

Komentáře k této Příručce

Žádné komentáře

Cisco PIX 525 Specifikace Strana 73

Komentáře k této Příručce

Související produkty a manuály pro Bezpečnostní systémy pro řízení přístupu Cisco PIX 525