Cisco PIX-515E Schnellstart-Handbuch - Seite 19

Blättern Sie online oder laden Sie pdf Schnellstart-Handbuch für Netzwerk-Hardware Cisco PIX-515E herunter. Cisco PIX-515E 42 Seiten. Security appliance
Auch für Cisco PIX-515E: Schnellstart-Handbuch (42 seiten)

Seite drucken

d. Enter the Source Host/Network information (0.0.0.0 for any host or network).

e. Under Destination Host/Network, click the IP Address radio button.

f. Select dmz from the Interface drop-down menu.

g. Enter 30.30.30.30 in the IP address box.

h. Select 255.255.255.255 from the Mask drop-down menu.

Alternatively, you can select the Hosts/Networks in both cases by clicking on the

Note

respective Browse buttons.

Select the type of traffic that you would permit:

Note

HTTP traffic is always directed from any TCP source port number toward a fixed destination

TCP port number 80.

i. Select the TCP radio button, under Protocol and Service.

j. Select "=" (equal to) from the Service drop-down menu under Source Port.

k. Scroll through the options, and select Any.

l. Select "=" (equal to) from the Service drop-down menu under Destination Port.

m. Scroll through the options, and select HTTP.

n. Click the OK

Note

For additional features, such as system log messages by ACL, check the radio button at

the top and click the More options button. You can provide a name for the access rule in

the window at the bottom.

o. Check the various fields for accuracy and click the OK

Note

Although the destination address specified above is the private address of the DMZ web

server (30.30.30.30), HTTP traffic from any host on the Internet destined for

209.165.156.11 is permitted through the PIX 515E. This is made possible by the

translation (30.30.30.30 = 209.165.156.11).

p. Click the Apply

button.

button in the main window.

button.