Cisco PIX 525 Especificaciones descargar pdf (Pagina 65)

2-5

Cisco PIX Firewall and VPN Configuration Guide

78-15033-01

Chapter 2 Establishing Connectivity

Configuring PIX Firewall Interfaces

Assigning an IP Address and Subnet Mask

Assign an IP address to each interface in your PIX Firewall that connects to another network.

PIX

Firewall interfaces do not have IP addresses until you assign them.

Note Multiple IP addresses can be assigned on the outside interface for internal web servers.

The format for the ip address command is as follows:

ip address interface_name ip_address netmask

• Replace interface_name with the name assigned to each PIX Firewall interface. By default, the

lowest security interface is named outside, while the highest security interface is named inside. Use

the nameif command to change the default name of an interface.

• Replace ip_address with the IP address you specify for the interface.

The IP addresses that you assign should be unique for each interface. Do not use an address you

previously used for routers, hosts, or with any other PIX

Firewall command, such as an IP address

in the global pool or for a static.

• Replace netmask with the appropriate network mask for the IP subnetwork.

For example, 255.0.0.0 for a Class A address (those that begin with 1 to 127), use 255.255.0.0 for

Class B

addresses (those that begin with 128 to 191), and 255.255.255.0 for Class C addresses (from

those that begin from 192 to 223). Do not use 255.255.255.255 for an interface connected to the

network because this will stop traffic on that interface. If subnetting is in use, use the subnet in the

mask; for example, 255.255.255.228.

Always specify a network mask with the ip address command. If you let PIX Firewall assign a network

mask based on the IP address, you may not be permitted to enter subsequent IP addresses if another

interface’s address is in the same range as the first address.

For example, if you specify an inside interface address of 10.1.1.1 without specifying a network mask

and then try to specify 10.1.2.2 for a perimeter interface address, PIX

Firewall displays the error

message, “Sorry, not allowed to enter IP address on same network as interface n.” To fix this problem,

reenter the first command specifying the correct network mask for the inside interface. Then enter the

IP address command for the perimeter interface, including the network mask.

Use the show ip command to view the commands you entered. If you make a mistake while entering a

command, reenter the same command with new information.

An example ip address command follows:

ip address inside 192.168.1.1 255.255.255.0

Identifying the Interface Type

All interfaces in a new PIX Firewall are shut down by default. You need to use the interface command

to explicitly enable each interface you are using.

If you have Ethernet interfaces in the PIX Firewall, the default configuration provides the necessary

options for the interface command. If your PIX

Firewall has Gigabit Ethernet, refer to the interface

command page in the Cisco

PIX Firewall Command Reference for configuration information.

The format for the interface command is as follows:

interface hardware_id hardware_speed [shutdown]

1 2 ... 60 61 62 63 64 65 66 67 68 69 70 ... 465 466

Comentarios a estos manuales

Sin comentarios

Cisco PIX 525 Especificaciones Pagina 65

Comentarios a estos manuales

Relacionado con productos y manuales para Los Sistemas De Control De Acceso De Seguridad Cisco PIX 525