Symantec Security 5600 Series, Security 5400 Series,Clientless VPN 4400 Series, Руководство администратора

Страница: 669 / 861

668 Field descriptions
Assets field descriptions
Network Interface Properties—Description tab
Optionally, provides an extended description. This information is useful to help track changes or it can
be used as criteria for searches.
The maximum length is 20,000 alphanumeric characters.
Address Transforms
There are four general network routing issues that require the creation of address transforms to
correctly route packets through the security gateway to their final destination. Address transforms
replace client source addresses.
■
When the security gateway is the default route for servers behind the security gateway that want to
see the original address of connecting clients.
■
When the security gateway is not the default route, and a connection coming into the security
gateway can only see the security gateway address. It does not know where to send the connection
from there and an address transform is needed to route packets to their final destination.
■
When the security gateway is not the default route, and you are using static one-to-one mapping of
addresses to conceal addresses on your network or to handle the problem of address overlapping.
■
When the security gateway is not the default route, and you are using dynamic NAT pools to
distribute a pool of addresses to a number of clients that is larger than the allotted NAT addresses.
Enable RIP on interface Enables support for RIP on this interface
.
This option is unchecked by default.
When you enable RIP, you can set the following parameters:
■
Default Metric
This field is often used as a mechanism to give priority to one interface over
another. The lower the cost, the more likely it is that this interface gets
chosen over another. Acceptable values range from 0 to 16.
The default value is 1.
■
Authentication Mode
Defines whether authentication is done using clear text or an MD5 hash.
The default value is None.
■
Authentication Key
Key used in the exchange of RIP packets. The key is either passed in clear
text or hashed based on the choice made in Authentication Mode.
The default value is no value.
Table D-116
Network Interface Properties—Routing tab (Continued)
Field Description