Nortel 4134 Guia Do Utilizador
232
Configuration examples
Figure 15
Simple firewall policy with DMZ
Simple firewall policy with DMZ
To configure the simple firewall policy shown, perform the following steps.
Procedure steps
Step
Action
1
To enter the configuration mode, enter:
configure terminal
2
To specify crypto configuration for IPsec and IKE, enter:
crypto
3
To specify the IPsec policy to configure, enter:
ipsec policy <policy-name> <peer-address>
4
To select the IPsec proposal to configure, enter:
proposal <1-5> protocol [esp | ah]
5
To create the untrusted firewall zone, enter:
firewall internet
6
To add an interface to the untrusted zone, enter:
interface wan1
exit
7
To create the trusted corp zone, enter:
firewall corp
Nortel Secure Router 4134
Security — Configuration and Management
NN47263-600
01.02
Standard
10.0
3 August 2007
Copyright © 2007, Nortel Networks
.