Applications
also wishes to allow all of the TCP traffic from the branch office network to have access to the head office. Anyone in the corporation may have unrestricted access to the Internet.
The following steps must be performed on the router to set up the firewall support as desired.
First the firewall on the ISP connection (remote site 1) of the WAN is set up. The firewall option is set to “inbound” to have this WAN firewall filter traffic from the ISP to the router while allowing unrestricted access out to the Internet.
7Firewall WAN Remote Site Filter direction Location: Main
ÄConfiguration
ÄApplications Set up
ÄFirewall Set up
ÄWAN Firewall Set up
Äenter ID# 1 for ISP remote site
ÄFirewall
Äinbound
The firewall on the Internet connection is set up to protect the entire corporate network, including the branch office, from unauthorized traffic.
Then the entries are made in the “Designated Servers” menu to allow Internet access to the FTP and Web servers on the corporate network.
7FTP & WWW Designated Servers Location: Main
ÄConfiguration
ÄApplications Set up
ÄFirewall Set up
ÄWAN Firewall Set up
ÄID# 1 for ISP remote site
ÄDesignated Servers
ÄFTP Server
— 195.100.1.12
Ä WWW (HTTP) Server
— 195.100.1.20
When defining a designated server you will be prompted for the IP address of that device. Adding an entry to the
53
