Example 2: Single Proposal: Tun-
Black Box1> show firewall policy internet detail
Policy with Priority 1000 is enabled, Direction is inbound
Action permit, Traffic is self
Logging is disable
Source Address is any, Dest Address is any
Source Port is any, Service Name is ike
Schedule is disabled,
Bytes In 0, Bytes Out 0
Policy with Priority 1024 is enabled, Direction is outbound
Action permit, Traffic is self
Logging is disable
Source Address is any, Dest Address is any
Source Port is any, Dest Port is any, any
Schedule is disabled,
Bytes In 0, Bytes Out 0
Step 8.4: Configure firewall policies to allow transit traffic from remote LAN to the local LAN (applicable only if firewall license is also enabled)
Black Box1/configure> firewall corp
Black Box1/configure/firewall corp> policy 1000 in address 10.0.2.0 24 10.0.1.0 24 Black Box1/configure/firewall corp/policy 1000 in> exit
Black Box1/configure/firewall corp> exit
Step 8.5: Display firewall policies in the corp map (applicable only if firewall license is enabled)
Black Box1> show firewall policy corp |
|
|
|
|
| ||||
Advanced: S - Self Traffic, | F - |
|
| ||||||
|
| R - | - | L - Logging, |
|
|
| ||
|
| E - Policy Enabled, M | - |
|
|
|
|
| |
Pri | Dir | Source Addr | Destination Addr | Sport | Dport | Proto Action | Advanced | ||
1000 | in | 10.0.2.0/24 | 10.0.1.0/24 | any | any | any | PERMIT | E | |
1022 | out | any | any |
| any | any | any | PERMIT | SE |
1023 | in | any | any |
| any | any | any | PERMIT | SE |
1024 | out | any | any |
| any | any | any | PERMIT | E |
Step 8.6: Display firewall policies in the corp map in detail (applicable only if firewall license is enabled)
31
