Foundry Networks AR3201-CL, AR3202-CL, AR1204, AR1216, AR1208 manual Permit

Security Features

Step 12: Display firewall policies in the internet map (applicable only if firewall license is enabled):

Router1# show firewall policy internet

Advanced: S - Self Traffic, F - Ftp-Filter, H - Http-Filter,

R- Rpc-Filter, N - Nat-Ip/Nat-Pool, L - Logging, E - Policy Enabled, M - Smtp-Filter

Pri	Dir	Source Addr	Destination Addr	Sport	Dport	Proto Action Advanced
---	---	-----------	----------------	-----------------			------ --------
1000	in	any	any	ike			PERMIT	SE
1024	out	any	any	any	any	any	PERMIT	SE

Step 13: Display firewall policies in the internet map in detail (applicable only if firewall license is enabled):

Router1# show firewall policy internet detail

Policy with Priority 1000 is enabled, Direction is inbound

Action permit, Traffic is self

Logging is disable

Source Address is any, Dest Address is any

Source Port is any, Service Name is ike

Schedule is disabled, Ftp-Filter is disabled

Smtp-Filter is disabled, Http-Filter is disabled

Rpc-Filter is disabled, Nat is disabled

Bytes In 0, Bytes Out 0

Policy with Priority 1024 is enabled, Direction is outbound

Action permit, Traffic is self

Logging is disable

Source Address is any, Dest Address is any

Source Port is any, Dest Port is any, any

Schedule is disabled, Ftp-Filter is disabled

Smtp-Filter is disabled, Http-Filter is disabled

Rpc-Filter is disabled, Nat is disabled

Step 14: Configure firewall policies to allow transit traffic from remote LAN to the local LAN (applicable only if firewall license is also enabled):

Router1/configure# firewall corp

Router1/configure/firewall corp# policy 1000 in address 10.0.2.0 24 10.0.1.0 24

Router1/configure/firewall corp/policy 1000 in# exit Router1/configure/firewall corp# exit

June 2004 © 2004 Foundry Networks, Inc. 15 - 15