Samsung Ubigate iBG3026, Configuration Manual

Page: 340 / 718

CHAPTER 25. IPSEC
300
© SAMSUNG Electronics Co., Ltd.
10.
Configure firewall policies to allow IKE negotiation through untrusted
interface.
Router/configure# firewall internet
Router/configure/firewall internet# policy 1000 in service
ike self
Router/configure/firewall internet/policy 1000 in# exit
11.
Display firewall policies in the internet map.
Router# show firewall policy internet
Advanced: S-Self Traffic, F-Ftp-Filter, H-Http-Filter,
R-Rpc-Filter, N-Nat-Ip/Nat-Pool, L-Logging,
E-Policy Enabled, M-Smtp-Filter
Pri Dir Source Addr Destination Addr Sport Dport Proto
Action Advanced
---- --- ---------- ---------------- ------------------
---------------
1000 in any any ike
PERMIT SE
1024 out any any any any any
PERMIT SE
12.
Display firewall policies in the internet map in detail.
Router# show firewall policy internet detail
Policy with Priority 1000 is enabled, Direction is inbound
Action permit, Traffic is self
Logging is disable
Source Address is any, Dest Address is any
Source Port is any, Service Name is ike
Schedule is disabled, Ftp-Filter is disabled
Smtp-Filter is disabled, Http-Filter is disabled
Rpc-Filter is disabled, Nat is disabled
Bytes In 0, Bytes Out 0
Policy with Priority 1024 is enabled, Direction is outbound
Action permit, Traffic is self
Logging is disable