Cisco PIX 520 - PIX Firewall 520, Онлайн руководство пользователя

Страница: 171 / 256

Edit host/network>Static Route
In the Edit host/network>Static Route dialog box, you can edit a static route to ensure that the PIX Firewall unit
correctly forwards network packets destined to the host or network. You can also use a static route to override any
dynamic routes that are discovered for this host or network by specifying a static route with a lower metric than
the discovered dynamic routes. To create a static route for a host or network, you must define the IP address and
metric for the hop gateway to which the PIX Firewall will forward packets destined to the selected host or
network. You can also define multiple static routes for a host or network. To do so, complete your changes in the
Edit host/network dialog box, and then add additional routes using the Routing>Static Route panel on the
System Properties tab.
The following sections are included in this Help topic:
Field Descriptions
●
Editing Static Routes
●
Field Descriptions
The Edit host/network>Static Route dialog box displays the following fields:
Define Static Route—Select this check box to define a static route for this host or network.
●
Gateway IP Address—Identifies the IP addresses of the default gateway (or the next hop gateway) that
forwards any network packets destined to this network or host.
●
Metric—Identifies the priority for using a specific route. When routing network packets, a PIX Firewall
unit uses the rule with the most specific network within the rule's definition. Only in cases where two
routing rules have the same network is the metric used to break the tie. In the case of a tie, the lowest
metric value wins. If no routing rule exists, the network packet is dropped, and if the gateway is not
detected (dead), the network packet is dropped. A metric is a measurement of the expense of a route based
on the number of hops (hop count) to the network on which a specific host resides. Hop count refers to the
number of networks that a network packet must traverse, including the destination network, before it
reaches its final destination. Because the hop count includes the destination network, all directly connected
networks have a metric of 1. For the metric value, you can specify a number between 1 and 15.
●
OK—Retains your changes and closes the Edit host/network dialog box.
●
Cancel—Clears any changes you may have made and returns to the Hosts/Networks tab.
●
Help—Provides more information.
●