Nortel 4134 用户指南
234
Configuration examples
3
To specify the IPsec policy to configure, enter:
ipsec policy <policy-name> <peer-address>
4
To select the IPsec proposal to configure, enter:
proposal <1-5> protocol [esp | ah]
5
To create the untrusted firewall zone, enter:
firewall internet
6
To add an interface to the untrusted zone, enter:
interface wan1
exit
7
To create the trusted corp zone, enter:
firewall corp
8
To add an interface to the trusted zone, enter:
interface ethernet0/1
9
To create the outbound NAT IP policy, enter:
policy 1024 out nat-ip 47.1.1.1
—End—
Configuring a PAT policy with an inbound forwarding policy
The following figure shows a PAT policy with an inbound forwarding policy.
Figure 17
PAT policy with inbound forwarding policy
PAT policy with inbound forwarding policy
Nortel Secure Router 4134
Security — Configuration and Management
NN47263-600
01.02
Standard
10.0
3 August 2007
Copyright © 2007, Nortel Networks
.