Cisco PIX 525 Dokumentacja Pobierz pdf (Strona 64)

2-4

Cisco PIX Firewall and VPN Configuration Guide

78-15033-01

Chapter 2 Establishing Connectivity

Configuring PIX Firewall Interfaces

To configure the default routes on a Cisco IOS router to forward traffic to the PIX Firewall complete the

following steps:

Step 1 Telnet to the router that connects to the inside interface of the PIX Firewall, or connect to the router’s

console port.

If you are using a Windows PC, you can connect to the console port using the HyperTerminal program.

You will need to know the password for the router.

Step 2 Access the Cisco IOS configuration mode.

Step 3 Set the default route to the inside interface of the PIX Firewall with the following Cisco IOS CLI

command:

ip route 0.0.0.0 0.0.0.0 if_address

For each PIX Firewall interface that is connected to a router, replace if_address with the IP address of

the PIX

Firewall interface.

Step 4 Enter the show ip route command and make sure that the connected PIX Firewall interface is listed as

the “gateway of last resort.”

Step 5 Clear the ARP cache with the clear arp command. Then enter Cntrl-Z to exit configuration mode.

Step 6 From the router, if you changed the default route, use the write memory command to store the

configuration in Flash memory.

Step 7 Connect to other routers on the inside and each perimeter interface of the PIX Firewall and repeat Steps

through 6 for each PIX Firewall interface and router.

Step 8 If you have routers on networks subordinate to the routers that connect to the PIX Firewall’s interfaces,

configure them so that their default routes point to the router connected to the PIX

Firewall and then

clear their ARP caches as well.

Setting the Default Route for Network Hosts

Each host on the same subnet as the inside or perimeter interfaces should have its default route pointing

to the PIX

Firewall. Refer to the documentation for the operating system of a specific host for

instructions for setting the default route.

Configuring PIX Firewall Interfaces

This section includes the following topics, which describe the configuration required for each

PIX

Firewall interface:

• Assigning an IP Address and Subnet Mask, page 2-5

• Identifying the Interface Type, page 2-5

• Changing Interface Names or Security Levels, page 2-7

1 2 ... 59 60 61 62 63 64 65 66 67 68 69 ... 465 466

Brak uwag

Cisco PIX 525 Dokumentacja Strona 64