Black Box LR1102A-T1/E1 User Manual

Page 29

Advertising
background image

Example 2: Single Proposal: Tun-

31

Black Box1> show firewall policy internet detail

Policy with Priority 1000 is enabled, Direction is inbound

Action permit, Traffic is self

Logging is disable

Source Address is any, Dest Address is any

Source Port is any, Service Name is ike

Schedule is disabled, Ftp-Filter is disabled

Smtp-Filter is disabled, Http-Filter is disabled

Rpc-Filter is disabled, Nat is disabled

Bytes In 0, Bytes Out 0

Policy with Priority 1024 is enabled, Direction is outbound

Action permit, Traffic is self

Logging is disable

Source Address is any, Dest Address is any

Source Port is any, Dest Port is any, any

Schedule is disabled, Ftp-Filter is disabled

Smtp-Filter is disabled, Http-Filter is disabled

Rpc-Filter is disabled, Nat is disabled

Bytes In 0, Bytes Out 0

Step 8.4: Configure firewall policies to allow transit traffic from remote LAN to the local LAN (applicable only if firewall license is

also enabled)

Black Box1/configure> firewall corp

Black Box1/configure/firewall corp> policy 1000 in address 10.0.2.0 24 10.0.1.0 24

Black Box1/configure/firewall corp/policy 1000 in> exit

Black Box1/configure/firewall corp> exit

Step 8.5: Display firewall policies in the corp map (applicable only if firewall license is enabled)
Black Box1> show firewall policy corp

Advanced: S - Self Traffic, F - Ftp-Filter, H - Http-Filter,

R - Rpc-Filter, N - Nat-Ip/Nat-Pool, L - Logging,

E - Policy Enabled, M - Smtp-Filter

Pri Dir Source Addr Destination Addr Sport Dport Proto Action Advanced

--- --- ----------- ---------------- ----------------- ------ --------

1000 in 10.0.2.0/24 10.0.1.0/24 any any any PERMIT E

1022 out any any any any any PERMIT SE

1023 in any any any any any PERMIT SE

1024 out any any any any any PERMIT E

Step 8.6: Display firewall policies in the corp map in detail (applicable only if firewall license is enabled)

Advertising
This manual is related to the following products: