Cisco Systems 2.5 How Do I Configure a Firewall on an Unsupported Interface?, How Do I Configure a Firewall After I Have Configured a VPN?

8-17
Cisco Router and Security Device Manager 2.5 User’s Guide
OL-4015-12
Chapter8 Create Firewall
How Do I...
How Do I Configure a Firewall on an Unsupported Interface?
Cisco SDM can configure a firewall on an interface type unsupported by Cisco
SDM. Before you can configure the firewall, you must first use the router CLI to
configure the interface. The interface must have, at a minimum, an IP address
configured, and it must be working. For more information on how to configure an
interface using the CLI, refer to the Software Configuration Guide for your router.
To verify that the connection is working, verify that the interface status is “Up” in
the Interfaces and Connections window.
The following is an exerpt showing the configuration for an ISDN interface on a
Cisco 3620 router:
!
isdn switch-type basic-5ess
!
interface BRI0/0
! This is the data BRI WIC
ip unnumbered Ethernet0/0
no ip directed-broadcast
encapsulation ppp
no ip mroute-cache
dialer map ip 100.100.100.100 name junky 883531601
dialer hold-queue 10
isdn switch-type basic-5ess
isdn tei-negotiation first-call
isdn twait-disable
isdn spid1 80568541630101 6854163
isdn incoming-voice modem
Other configurations are available in the Software Configuration Guide for your
router.
After you have configured the unsupported interface using the CLI, yo u canuse
Cisco SDM to configure the firewall. The unsupported interface will appear as
“Other” in the fields listing the router interfaces.
How Do I Configure a Firewall After I Have Configured a VPN?
If a firewall is placed on an interface used in a VPN, the firewall must permit
traffic between the local and remote VPN peers. If you use the Basic or Advanced
Firewall wizard, Cisco SDM will automatically permit traffic to flow between
VPN peers.