Patton OnSite 2603, Руководство пользователя

Страница: 73 / 131

Enabling the Firewall 73
Models 2603, 2621, and 2635 User Manual 7 • Security
Enabling the Firewall
At this point, both security and the firewall can be enabled and the network is secure. All the interfaces which
have been defined are protected, that is, all traffic has been blocked between the internal (‘ip1’) and external
(‘ppp-0’) interfaces. Only traffic which has validators is allowed to pass through, and, at this moment, there are
no validators.
1.
Return to the Security page.
2.
Under Security State select Enabled for Security. Click on Change State.
3.
Next select Enabled for Firewall. Click on Change State.
The network is now secure. All the interfaces which have been defined are protected and all traffic is blocked
between different the different interface types. That is, all traffic is blocked between the external and internal
interfaces.
The next section describes how to configure the Firewall for allowing certain types of data transfer to occur
between the PCs on different networks.
Firewall Portfilters
Next, we configure the Firewall to permit certain types of data transfer between the PCs (in general, hosts) on
the different networks. This is done by the implementation of Firewall portfilters. Portfilters are individual
rules that determine what kind of traffic can pass between two interface types.
For the Protocol Number below, the different types are defined as:
Protocol
Number
Abbreviation
1 ICMP
2 IGMP
3 GGP
4 IP
6 TCP
8 EGP
9 IGP
17 UDP
46 RSVP
47 GRE
89 OSPFIGP
92 MTP
94 IPIP
This example continues to allow pings over the firewall:
1.
From the Configuration Menu, > Configuration > Security > Security Policy Configuration... > Port Filters...
> Add Raw IP Filter