communication between the virtual systems. For example, Department A does not need to
communicate with Department B. If communication between them is needed then an
appropriate loopback interface pair would have to be defined to allow this.
After we define a loopback interface, all traffic sent to that interface automatically appears as
being received on another interface.
4.5.3. The Disadvantage of Routing Rules
Using Routing Rules can solve many of the problems that virtual routing can but complex
configurations can become unwieldy for such rules. Consider a single NetDefend Firewall being
used as a firewall for two organizations, both using the same IP span.
In this case, two separate routing tables could be used, one for each organization as shown
below.
Figure 4.9. The Disadvantage of Routing Rules
Two routing tables pbr1 and pbr2 are first defined for this scenario. Their contents are listed
below:
Routing Table pbr1
Route # Interface Network Gateway
1 wan all-nets wan_gw
2 If1 192.168.0.0/24
Routing Table pbr2
Route # Interface Network Gateway
1 wan all-nets wan_gw
Chapter 4: Routing
325
To Next Page
Loading...
