Filter and Firewall
Left running head:
Chapter name (automatic)
782
Beta Beta
OmniAccess 5740 Unified Services Gateway CLI Configuration Guide
Alcatel-Lucent
Exit //Done
If you prefer, you can use interface based classification:
match-list trusted
ip interface GigabitEthernet3/0 any
match-list untrusted
ip interface GigabitEthernet3/1 any
match-list dmz
ip interface GigabitEthernet3/0 any
Suppose GigabitEthernet 3/1 is facing external networks, you will need to
bind these NAT and filter policies to this interface:
interface GigabitEthernet3/1 //Physical interface to untrusted
networks
ip nat out nat-policy //This will NAT internal traffic
ip filter out permit-dmz-policy //This will permit DMZ traffic without
translation
ip filter in deny-untrusted-policy //This will deny all untrusted
traffic originated from outside
Exit //Done
To Next Page
Loading...
