Cisco Systems OL-6426-02 Benutzerhandbuch
C H A P T E R
B E TA D R A F T - C I S C O C O N F I D E N T I A L
8-1
Cisco 1800 Series Integrated Services Routers (Fixed) Software Configuration Guide
OL-6426-02
8
Configuring a Simple Firewall
The Cisco 1800 integrated services routers support network traffic filtering by means of access lists. The
router also supports packet inspection and dynamic temporary access lists by means of Context-Based
Access Control (CBAC).
router also supports packet inspection and dynamic temporary access lists by means of Context-Based
Access Control (CBAC).
Basic traffic filtering is limited to configured access list implementations that examine packets at the
network layer or, at most, the transport layer, permitting or denying the passage of each packet through
the firewall. However, the use of inspection rules in CBAC allows the creation and use of dynamic
temporary access lists. These dynamic lists allow temporary openings in the configured access lists at
firewall interfaces. These openings are created when traffic for a specified user session exits the internal
network through the firewall. The openings allow returning traffic for the specified session (that would
normally be blocked) back through the firewall.
network layer or, at most, the transport layer, permitting or denying the passage of each packet through
the firewall. However, the use of inspection rules in CBAC allows the creation and use of dynamic
temporary access lists. These dynamic lists allow temporary openings in the configured access lists at
firewall interfaces. These openings are created when traffic for a specified user session exits the internal
network through the firewall. The openings allow returning traffic for the specified session (that would
normally be blocked) back through the firewall.
See the
, for more detailed information on traffic
filtering and firewalls.
shows a network deployment using PPPoE or PPPoA with NAT and a firewall.
Figure 8-1
Router with Firewall Configured
121781
2
3
7
5
6
1
4