Example 4: IPSec remote access

Black Box1/configure> firewall internet

Black Box1/configure/firewall internet> policy 1000 in service ike self Black Box1/configure/firewall internet/policy 1000 in> exit

Black Box1/configure/firewall internet> exit

Step 12: Display firewall policies in the internet map (applicable only if firewall license is enabled)

Black Box1>

show firewall

policy internet

Advanced: S

- Self Traffic,

F

-

Ftp-Filter, H - Http-Filter,

R

-

Rpc-Filter,

N

-

Nat-Ip/Nat-Pool, L - Logging,

E

-

Policy Enabled,

M

- Smtp-Filter

Pri

Dir

Source Addr

Destination Addr

Sport

Dport

Proto Action

Advanced

---

---

-----------

----------------

-----------------

------

--------

1000

in

any

any

ike

 

 

PERMIT

SE

1024

out

any

any

any

any

any

PERMIT

SE

Step 13: Display firewall policies in the internet map in detail (applicable only if firewall license is enabled)

Black Box1> show firewall policy internet detail

Policy with Priority 1000 is enabled, Direction is inbound

Action permit, Traffic is self

Logging is disable

Source Address is any, Dest Address is any

Source Port is any, Service Name is ike

Schedule is disabled, Ftp-Filter is disabled

Smtp-Filter is disabled, Http-Filter is disabled

Rpc-Filter is disabled, Nat is disabled

Bytes In 0, Bytes Out 0

Policy with Priority 1024 is enabled, Direction is outbound

Action permit, Traffic is self

Logging is disable

Source Address is any, Dest Address is any

Source Port is any, Dest Port is any, any

Schedule is disabled, Ftp-Filter is disabled

Smtp-Filter is disabled, Http-Filter is disabled

Rpc-Filter is disabled, Nat is disabled

Bytes In 0, Bytes Out 0

Step 14: Configure firewall policies for a group of mobile users to allow access to the local LAN (applicable only if firewall license is enabled)

Black Box1/configure/firewall corp>

Black Box1/configure/firewall corp> policy 1000 in user-group sales address any any 10.0.1.0 24

Black Box1/configure/firewall corp/policy 1000 in >exit

Black Box1/configure/firewall corp>

Step 15: Display firewall policies in the corp map (applicable only if firewall license is enabled)

39

Page 37
Image 37
Black Box LR1114A-T1/E1, LR1112A-T1/E1, LR1104A-T1/E1, LR1102A-T1/E1 manual Bytes In 0, Bytes Out