McAfee SG310, Administration Manual

Page: 116 / 412

116 McAfee UTM Firewall 4.0.4 Administration Guide
Network Setup menu options
Routes
multicast
! Example static default route for Internet connection
#ip route 0.0.0.0/0 212.170.21.129
3
In
ospfd.conf
, enter:
hostname sg
! Uncomment and set telnet/vty passwords to enable telnet access on port 2604
#password changeme
#enable password changeme
! Instruct ospfd about our network topology
router ospf
network 192.168.0.0/24 area 0
network 172.17.0.0/16 area 1
4
Restart route management to enable the updated configuration – clear the Enable route management
checkbox, click Update, select the Enable route management checkbox again and click Update.
If you prefer, you can uncomment the password and enable password lines, and then telnet to the
relevant ports to configure Zebra or
ospfd
via the command line.
Example: BGP
This example is adapted from the LARTC (Linux Advanced Routing & Traffic Control) dynamic routing
howto, available from:
http://lartc.org/howto/ . LARTC is an invaluable resource for those wanting to learn
about and take advantage of the advanced routing capabilities of Linux systems.
The Border Gateway Protocol (BGP) allows the distribution of reachability information, that is, routing
tables, to other BGP-enabled nodes. It can be used either as EGP or IGP. In EGP mode, each node must
have its own Autonomous System (AS) number. BGP supports Classless Inter Domain Routing (CIDR) and
route aggregation (merge multiple routes into one).
The network map shown in
Figure 118 is used for this example. AS 2 and 3 have more neighbors but we
need to configure only 2 and 3 as our neighbor.
Figure 118 BGP example network
Ensure you have enabled BGP under Route Management, then open zebra.conf and bgpd.conf for
editing as described in
Manually configuring route management .
In zebra.conf, enter:
hostname
sg
! Uncomment and set telnet/vty passwords to enable telnet access on port 2602