Cisco PIX 525 Spezifikationen PDF herunterladen (Seite 85)

8-3

Cisco Security Appliance Command Line Configuration Guide

OL-6721-01

Chapter 8 Configuring IP Routing and DHCP Services

Configuring OSPF

Configuring a Default Route

A default route identifies the gateway IP address to which the security appliance sends all IP packets for

which it does not have a learned or static route. A default route is simply a static route with 0.0.0.0/0 as

the destination IP address. Routes that identify a specific destination take precedence over the default

route.

You can define up to three equal cost default route entries per device. Defining more than one equal cost

default route entry causes the traffic sent to the default route to be distributed among the specified

gateways. When defining more than one default route, you must specify the same interface for each

entry.

If you attempt to define more than three equal cost default routes, or if you attempt to define a default

route with a different interface than a previously defined default route, you receive the message

“ERROR: Cannot add route entry, possible conflict with existing routes.”

You can define a separate default route for tunneled traffic along with the standard default route. When

you create a default route with the tunneled option, all encrypted traffic that arrives on the security

appliance and cannot be routed using learned or static routes is sent to this route. Otherwise, if the traffic

is not encrypted, the standard default route entry is used. You cannot define more than one default route

with the tunneled option; ECMP for tunneled traffic is not supported.

To define the default route, enter the following command:

hostname(config)# route

if_name

0.0.0.0 0.0.0.0

gateway_ip

[

distance

| tunneled]

Tip You can enter 0 0 instead of 0.0.0.0 0.0.0.0 for the destination network address and mask, for example:

hostname(config)# route outside 0 0 192.168.1 1

The following example shows a security appliance configured with three equal cost default routes and a

default route for tunneled traffic. Unencrypted traffic received by the security appliance for which there

is no static or learned route is distributed among the gateways with the IP addresses 192.168.2.1,

192.168.2.2, 192.168.2.3. Encrypted traffic receive by the security appliance for which there is no static

or learned route is passed to the gateway with the IP address 192.168.2.4.

hostname(config)# route outside 0 0 192.168.2.1

hostname(config)# route outside 0 0 192.168.2.2

hostname(config)# route outside 0 0 192.168.2.3

hostname(config)# route outside 0 0 192.168.2.4 tunneled

Configuring OSPF

This section describes how to configure OSPF. This section includes the following topics:

• OSPF Overview, page 8-4

• Enabling OSPF, page 8-5

• Redistributing Routes Between OSPF Processes, page 8-5

• Configuring OSPF Interface Parameters, page 8-8

• Configuring OSPF Area Parameters, page 8-10

• Configuring OSPF NSSA, page 8-11

• Configuring Route Summarization Between OSPF Areas, page 8-12

1 2 ... 80 81 82 83 84 85 86 87 88 89 90 ... 603 604

Kommentare zu diesen Handbüchern

Keine Kommentare

Cisco PIX 525 Spezifikationen Seite 85

Kommentare zu diesen Handbüchern