Cisco PIX 525 Dokumentacja Pobierz pdf (Strona 321)

9-19

Cisco PIX Firewall and VPN Configuration Guide

78-15033-01

Chapter 9 Accessing and Monitoring PIX Firewall

Using Telnet for Remote System Management

To open a VPN tunnel for running a Telnet session to a PIX Firewall from an Easy VPN Remote device,

follow these steps:

Step 1 Set up IPSec by entering the following commands:

isakmp policy 10 authentication pre-share

isakmp policy 10 group 2

isakmp enable outside

crypto ipsec transform-set esp-des-md5 esp-des esp-md5-hmac

crypto dynamic-map dynmap 10 set transform-set esp-des-md5

crypto map mymap 10 ipsec-isakmp dynamic dynmap

crypto map mymap interface outside

Step 2 Set up an IP pool for the Telnet session by entering the following commands:

ip local pool tnpool 1.1.1.1-1.1.1.1

Step 3 Set up Telnet access by entering the following command:

telnet 1.1.1.1 255.255.255.255 outside

Step 4 Set up the VPN group for the remote Telnet user by entering the following commands:

vpngroup telnet address-pool tnpool

vpngroup telnet password 12345678

Step 5 Setup the VPN client authentication by entering the following commands:

group telnet

password 12345678

Using Cisco Secure VPN Client Version 1.1

This section applies if you are using a Cisco Secure VPN Client Version 1.1. In the example, the IP

address of the PIX

Firewall’s outside interface is 168.20.1.5, and the Cisco Secure VPN Client’s IP

address, derived from the virtual pool of addresses, is 10.1.2.0.

To encrypt your Telnet connection to a PIX Firewall lower interface, perform the following steps as part

of your PIX

Firewall configuration:

Step 1 Create an access-list command statement to define the traffic to protect from the PIX Firewall to the

VPN client using a destination address from the virtual local pool of addresses:

access-list 80 permit ip host 168.20.1.5 10.1.2.0 255.255.255.0

Step 2 Specify which host can access the PIX Firewall console with Telnet:

telnet 10.1.2.0 255.255.255.0 outside

Specify the VPN client’s address from the local pool and the outside interface.

Step 3 Within the VPN client, create a security policy that specifies the Remote Party Identity IP address and

gateway IP address as the same IP address—the IP address of the PIX

Firewall’s outside interface. In

this example, the IP address of the PIX

Firewall’s outside is 168.20.1.5.

Step 4 Configure the rest of the security policy on the VPN client to match the PIX Firewall’s security policy.

1 2 ... 316 317 318 319 320 321 322 323 324 325 326 ... 465 466

Komentarze do niniejszej Instrukcji

Brak uwag

Cisco PIX 525 Dokumentacja Strona 321

Komentarze do niniejszej Instrukcji

Powiązane produkty i podręczniki dla Systemy kontroli dostępu bezpieczeństwa Cisco PIX 525