Cisco Systems ISA550 Manual De Usuario
Configuration Wizards
Using the DMZ Wizard to Configure DMZ Settings
Cisco ISA500 Series Integrated Security Appliances Administration Guide
74
2
•
WINS2: Optionally, enter the IP address of a secondary WINS server.
•
Domain Name: Optionally, enter the domain name for the DMZ.
•
Default Gateway: Enter the IP address of default gateway.
STEP 13
Click OK to save your settings.
STEP 14
After you are finished, click Next.
Configuring DMZ Services
STEP 15
Use the DMZ Service page to configure the DMZ services.
STEP 16
Click Add to create a DMZ service.
Other options: To edit an entry, click the Edit (pencil) icon. To delete an entry, click
the Delete (x) icon. To delete multiple entries, check them and click Delete.
the Delete (x) icon. To delete multiple entries, check them and click Delete.
STEP 17
Enter the following information:
•
Original Service: Choose a service as the incoming service.
•
Translated Service: Choose a service as the translated service or choose
Original if the translated service is same as the incoming service. If the
service that you want is not in the list, choose Create a new service to
create a new service object. To maintain the service objects, go to the
Networking > Service Management page. See
Original if the translated service is same as the incoming service. If the
service that you want is not in the list, choose Create a new service to
create a new service object. To maintain the service objects, go to the
Networking > Service Management page. See
NOTE: One-to-one translation will be performed for port range forwarding.
For example, if you want to translate an original TCP service with the port
range of 50000 to 50002 to a TCP service with the port range of 60000 to
60002, then the port 50000 will be translated to the port 60000, the port
50001 will be translated to the port 60001, and the port 50002 will be
translated to the port 60002.
For example, if you want to translate an original TCP service with the port
range of 50000 to 50002 to a TCP service with the port range of 60000 to
60002, then the port 50000 will be translated to the port 60000, the port
50001 will be translated to the port 60001, and the port 50002 will be
translated to the port 60002.
•
Translated IP: Choose the IP address of your local server that needs to be
translated. If the IP address that you want is not in the list, choose Create a
new address to create a new IP address object. To maintain the IP address
objects, go to the Networking > Address Management page. See
translated. If the IP address that you want is not in the list, choose Create a
new address to create a new IP address object. To maintain the IP address
objects, go to the Networking > Address Management page. See
•
WAN: Choose either WAN1 or WAN2, or both as the incoming WAN port.