Symantec Security 5600 Series, Security 5400 Series,Clientless VPN 4400 Series, Руководство администратора

Страница: 134 / 861

134 Establishing your network
Allowing DHCP traffic
8
Optionally, do one of the following:
■
To save your configuration now, and activate later, on the toolbar, click Save .
■
To activate your configuration now, on the toolbar, click Activate .
■
When prompted to save your changes, click Yes .
9 Restart the security gateway.
To configure a UDP protocol that uses GSP for port 67
1 In the SGMI, in the left pane, click Protocols .
2 In the right pane, on the Protocols tab, click New > TCP UDP Based Protocol .
3 In the TCP UDP Based Protocol Properties dialog box, do the following:
4 Optionally, do one of the following:
■
To save your configuration now, and activate later, on the toolbar, click Save .
■
To activate your configuration now, on the toolbar, click Activate .
■
When prompted to save your changes, click Yes .
To add the new protocol to a service group
1 In the SGMI, in the left pane, click Protocols .
2
In the right pane, on the Service Groups tab, click New .
3 In the Service Group Properties dialog box, on the General tab, in the Service group name text box,
type a name for the service group, such as Multi_hop_DHCP.
4
On the Protocols tab, click Add .
5 In the Select protocols dialog box, select the protocol you created for port 67, and then click OK .
6 Click OK .
7 Optionally, do one of the following:
■
To save your configuration now, and activate later, on the toolbar, click Save .
■
To activate your configuration now, on the toolbar, click Activate .
■
When prompted to save your changes, click Yes .
To add a rule that allows multiple-hop DHCP traffic
1 In the SGMI, in the left pane, under Policy, click Firewall .
2
In the right pane, on the Rules tab, click New .
Protocol name Type a name for the protocol.
For example, type DHCP_protocol.
Base protocol type Select UDP from the drop-down list.
Destination port use Select Single port.
Destination low port Type 67.
Source port use Select Single port.
Source low port Type 67.
Use GSP Check this check box to enable the use of the GSP proxy.
Caption Optionally, type a brief description of the protocol.