Cisco PIX 525 Especificaciones descargar pdf (Pagina 67)

2-7

Cisco PIX Firewall and VPN Configuration Guide

78-15033-01

Chapter 2 Establishing Connectivity

Configuring PIX Firewall Interfaces

• Replace hardware_id with the hardware name for the network interface card, such as ethernet2 and

ethernet3, and so forth. For details about the interface numbering of a specific PIX

Firewall model,

refer to the Cisco PIX Firewall Hardware Installation Guide.

• Replace hardware_speed with the speed of the interface, using the values shown in Table 2-2.

Note We recommend that you use the auto option to allow the PIX Firewall to automatically select the correct

speed and duplex setting. If you use a fixed setting and you later change the setting, the interface will

shut down.

The shutdown option disables use of the interface. When you first install PIX Firewall, all interfaces

have the shutdown option in effect.

Use the write terminal command to view the configuration and locate the interface command

information. If you make a mistake while entering an interface command, reenter the same command

with new information.

Ta b l e 2-2 Values for the hardware_speed Parameter

Value Description

10baset 10 Mbps Ethernet half-duplex communications.

100basetx 100 Mbps Ethernet half-duplex communications.

100full 100 Mbps Ethernet full-duplex communications.

1000full 1000 Mbps Gigabit Ethernet, autonegotiaties advertising full duplex only.

1000full

nonegotiate

1000 Mbps Gigabit Ethernet, forces speed to 1000 Mbps full duplex.

1000auto 1000 Mbps Gigabit Ethernet to auto-negotiate full or half duplex.

aui 10 Mbps Ethernet half-duplex communications for an AUI cable interface.

auto Automatically sets Ethernet speed and duplex operation.

bnc 10 Mbps Ethernet half-duplex communications for a BNC cable interface.

Note Make sure the maximum transmission unit (MTU) is no more than 1500 bytes for Ethernet. To view the

MTU, use the show mtu command.

Changing Interface Names or Security Levels

Each interface has a unique name and security level that you can change using the nameif command. By

default, Ethernet0 is named outside and assigned the level security0. Ethernet1 is named inside with the

level security100. By default, perimeter interfaces are named intfn, where n represents the position of

the interface card in the PIX

Firewall. The default security level of perimeter interfaces starts at

security10 for ethernet2 (intf2), and increments by 5 for each additional interface.

Note You can skip this section if you are using the default interface names and security levels.

1 2 ... 62 63 64 65 66 67 68 69 70 71 72 ... 465 466

Sin comentarios

Cisco PIX 525 Especificaciones Pagina 67