Freedom9 freeGuard Blaze 2100, Руководство пользователя

Страница: 22 / 224

G E T T I N G S T A R T E D
Installing the freeGuard Blaze 2100
2-8
Security Appliance User Guide Version 3R2
2
set route 0.0.0.0/0 interface eth1 gateway 4.4.4.254
save
Optional: to verify the default route settings execute the get route
summary command:
get route summary
C O N F I G U R I N G A P O L I C Y F R O M T R U S T T O U N T R U S T
The default policy behavior is to not allow traffic to or from any zone that
does not match a policy. In the example in
Figure 2-2 , you must create a
policy allowing any traffic from the trust to the untrust zone. This is a
common policy to enable hosts on the LAN connected to the trust zone to
browse the Internet using a web browser.
Use the set policy command to create a policy allowing any traffic going
from the trust zone to the untrust zone:
set policy from trust to untrust any any any permit
save
[NOTE] For more information about configuring policies, refer to Chapter
9, “Policy Configuration.”
V I E W I N G T H E P O L I C Y C O N F I G U R A T I O N
Use the get config command to view the policy configuration:
get config
This command returns the following information, which is based on the
network diagram in
Figure 2-2 :
(Interfaces)
set interface eth0 ip 10.0.0.1/24
set interface eth0 zone trust
set interface eth0 nat
set interface eth1 ip 4.4.4.1/24
set interface eth1 untrust
(Route)
set route 0.0.0.0/0 interface eth1 gateway 4.4.4.254