Nortel 4134 Guia Do Utilizador
250
Configuration examples
4
To configure the corp firewall for outgoing IPsec tunnel traffic, enter:
policy 1001 out permit address 10.1.1.0 24 20.1.1.0 24
exit
5
To configure the NAT for internet access, enter:
policy 1002 out permit address 10.1.1.2 10.1.1.254 any
any nat-ip 200.1.1.1
exit
6
To add the trusted Ethernet interface to the corp firewall, enter:
interface ethernet0/1
exit
—End—
Firewall configuration for SR4134 2
Step
Action
1
To configure the internet firewall, enter:
configure terminal
firewall internet
policy 1000 in permit service ike self
exit
2
To add the untrusted WAN interface to the internet firewall, enter:
interface wan1
exit
3
To configure the corp firewall for incoming IPsec tunnel traffic, enter:
firewall corp
policy 1000 in permit address 10.1.1.0 24 20.1.1.0 24
exit
4
To configure the corp firewall for outgoing IPsec tunnel traffic, enter:
policy 1001 out permit address 20.1.1.0 24 10.1.1.0 24
exit
5
To configure the NAT for internet access, enter:
policy 1002 out permit address 20.1.1.2 20.1.1.254 any
any nat-ip 200.1.1.2
exit
6
To add the trusted Ethernet interface to the corp firewall, enter:
interface ethernet0/1
Nortel Secure Router 4134
Security — Configuration and Management
NN47263-600
01.02
Standard
10.0
3 August 2007
Copyright © 2007, Nortel Networks
.