Cisco Systems OL-12172-01 Manual De Usuario

Descargar
Página de 16
C H A P T E R
 
15-1
Cisco Security Appliance Command Line Configuration Guide
OL-12172-01
15
Firewall Mode Overview
This chapter describes how the firewall works in each firewall mode. To set the firewall mode, see the 
Note
In multiple context mode, you cannot set the firewall mode separately for each context; you can only set 
the firewall mode for the entire security appliance.
This chapter includes the following sections:
Routed Mode Overview
In routed mode, the security appliance is considered to be a router hop in the network. It can use OSPF 
or RIP (in single context mode). Routed mode supports many interfaces. Each interface is on a different 
subnet. You can share interfaces between contexts.
This section includes the following topics:
IP Routing Support
The security appliance acts as a router between connected networks, and each interface requires an 
IP address on a different subnet. In single context mode, the routed firewall supports OSPF and RIP. 
Multiple context mode supports static routes only. We recommend using the advanced routing 
capabilities of the upstream and downstream routers instead of relying on the security appliance for 
extensive routing needs.
How Data Moves Through the Security Appliance in Routed Firewall Mode
This section describes how data moves through the security appliance in routed firewall mode, and 
includes the following topics: