28.06.2014 Views

Discussion

Discussion

Discussion

SHOW MORE
SHOW LESS

You also want an ePaper? Increase the reach of your titles

YUMPU automatically turns print PDFs into web optimized ePapers that Google loves.

The next term allows TCP traffic:<br />

[edit firewall filter protect-RE]<br />

aviva@RouterF# edit term tcp-traffic<br />

[edit firewall filter protect-RE term tcp-traffic]<br />

aviva@RouterF# set from source-address 10.0.0.0/8<br />

aviva@RouterF# set from protocol tcp<br />

aviva@RouterF# set then accept<br />

The following term allows DNS traffic:<br />

[edit firewall filter protect-RE]<br />

aviva@RouterF# edit term dns-servers<br />

[edit firewall filter protect-RE term dns-servers]<br />

aviva@RouterF# set from source-address 10.0.0.0/8<br />

aviva@RouterF# set from protocol udp<br />

aviva@RouterF# set from port domain<br />

aviva@RouterF# set then accept<br />

The next two terms allow RADIUS, SSH, and Telnet connections to the router:<br />

[edit firewall filter protect-RE]<br />

aviva@RouterF# edit term radius<br />

[edit firewall filter protect-RE term radius]<br />

aviva@RouterF# set from source-address 10.1.0.1/32<br />

aviva@RouterF# set from source-address 10.3.0.1/32<br />

aviva@RouterF# set from source-port radius<br />

aviva@RouterF# set then accept<br />

[edit firewall filter protect-RE term radius]<br />

aviva@RouterF# up<br />

[edit firewall filter protect-RE]<br />

aviva@RouterF# edit term ssh-telnet<br />

[edit firewall filter protect-RE term ssh-telnet]<br />

aviva@RouterF# set from source-address 10.0.8.0/24<br />

aviva@RouterF# set from source-address 10.0.13.0/24<br />

aviva@routerF# set from destination-port [ ssh telnet ]<br />

aviva@RouterF# set then accept<br />

Two terms accept traffic from SNMP NMS systems:<br />

[edit firewall filter protect-RE]<br />

aviva@RouterF# edit term xnm-from-nms<br />

[edit firewall filter protect-RE term xnm-from-nms]<br />

aviva@RouterF# set from source-address 10.0.0.1/32<br />

aviva@RouterF# set from source-address 10.0.5.1/32<br />

aviva@RouterF# set from protocol tcp<br />

aviva@RouterF# set then accept<br />

aviva@RouterF# up<br />

[edit firewall filter protect-RE]<br />

aviva@RouterF# edit term allow-snmp-from-nms<br />

[edit firewall filter protect-RE term allow-snmp-from-nms]<br />

aviva@RouterF# set from source-address 10.0.0.1/32<br />

aviva@RouterF# set from source-address 10.0.5.1/32<br />

aviva@RouterF# set from protocol udp<br />

aviva@RouterF# set from destination-port snmp<br />

aviva@RouterF# set then accept<br />

Protecting the Local Routing Engine | 321<br />

This is the Title of the Book, eMatter Edition<br />

Copyright © 2008 O’Reilly & Associates, Inc. All rights reserved.

Hooray! Your file is uploaded and ready to be published.

Saved successfully!

Ooh no, something went wrong!