Enterasys Networks XSR-Series manual Firewall configuration

11.1 Firewall configuration

XSR-1805#show running-config

!!

!Version 4.0.0.0, Built Mar 26 2003, 19:47:17

hostname XSR-1805

interface FastEthernet1

description "Interal_network_Private" ip address 10.10.10.1 255.255.0.0

no shutdown

interface FastEthernet2

description "External_network_Intranet" ip address 192.168.224.133 255.255.255.0 no shutdown

interface Loopback0

description "internal_loopback_Private" ip address 13.13.13.1 255.255.255.0

no shutdown

ip firewall network 192 192.168.224.1 192.168.224.255 external ip firewall network 13 13.13.13.1 13.13.13.255 internal

ip firewall network 10 10.10.10.1 10.10.255.255 internal

ip firewall network-group g192 192 ip firewall network-group g13 13 ip firewall network-group g10 10

ip firewall network-group g10+g13 13 10

ip firewall policy inSSH g192 g13 SSH allow-log bidirectional

ip firewall policy inTelnet g10+g13 g10+g13 Telnet allow-log bidirectional ip firewall policy FTP_okay g10 g192 FTP allow bidirectional

ip firewall policy HTTP_okay g10 g192 HTTP allow bidirectional

ip firewall load

end

XSR-1805#

Configuration Guide Page 42 of 55