Nortel 4134 用户指南
Configuring SIP ALG line-side
235
To configure the PAT policy shown, perform the following steps.
Procedure steps
Step
Action
1
To enter the configuration mode, enter:
configure terminal
2
To specify crypto configuration for IPsec and IKE, enter:
crypto
3
To specify the IPsec policy to configure, enter:
ipsec policy <policy-name> <peer-address>
4
To select the IPsec proposal to configure, enter:
proposal <1-5> protocol [esp | ah]
5
To create the untrusted firewall zone, enter:
firewall internet
6
To add an interface to the untrusted zone, enter:
interface wan1
exit
7
To create the trusted corp zone, enter:
firewall corp
8
To add an interface to the trusted zone, enter:
interface ethernet0/1
9
To create the outbound NAT IP policy, enter:
policy 1024 out nat-ip 47.1.1.1
—End—
Configuring SIP ALG line-side
The following figure shows a SIP ALG line-side configuration.
Nortel Secure Router 4134
Security — Configuration and Management
NN47263-600
01.02
Standard
10.0
3 August 2007
Copyright © 2007, Nortel Networks
.