Cisco PIX 525 Spezifikationen PDF herunterladen (Seite 83)

100

101

CHAPTER

8-1

Cisco Security Appliance Command Line Configuration Guide

OL-6721-01

Configuring IP Routing and DHCP Services

This chapter describes how to configure IP routing and DHCP on the security appliance. This chapter

includes the following sections:

• Configuring Static and Default Routes, page 8-1

• Configuring OSPF, page 8-3

• Configuring RIP, page 8-16

• Configuring Multicast Routing, page 8-17

• Configuring DHCP, page 8-24

Configuring Static and Default Routes

This section describes how to configure static routes on the security appliance.

Multiple context mode does not support dynamic routing, so you must use static routes for any networks

to which the security appliance is not directly connected; for example, when there is a router between a

network and the security appliance.

You might want to use static routes in single context mode in the following cases:

• Your networks use a different router discovery protocol from RIP or OSPF.

• Your network is small and you can easily manage static routes.

• You do not want the traffic or CPU overhead associated with routing protocols.

The simplest option is to configure a default route to send all traffic to an upstream router, relying on the

router to route the traffic for you. However, in some cases the default gateway might not be able to reach

the destination network, so you must also configure more specific static routes. For example, if the

default gateway is outside, then the default route cannot direct traffic to any inside networks that are not

directly connected to the security appliance.

In transparent firewall mode, for traffic that originates on the security appliance and is destined for a

non-directly connected network, you need to configure either a default route or static routes so the

security appliance knows out of which interface to send traffic. Traffic that originates on the security

appliance might include communications to a syslog server, Websense or N2H2 server, or AAA server.

If you have servers that cannot all be reached through a single default route, then you must configure

static routes.

The security appliance supports up to three equal cost routes on the same interface for load balancing.

1 2 ... 78 79 80 81 82 83 84 85 86 87 88 ... 603 604

Kommentare zu diesen Handbüchern

Keine Kommentare

Cisco PIX 525 Spezifikationen Seite 83

Kommentare zu diesen Handbüchern