Nortel Secure 4134 Configuration page 232

232 Configuration examples
Figure 15
Simple firewall policy with DMZ
To configure the simple firewall policy shown, perform the following steps.
Procedure steps
Step
1
2
3
4
5
6
7
Copyright © 2007, Nortel Networks
.
Action
To enter the configuration mode, enter:
configure terminal
To specify crypto configuration for IPsec and IKE, enter:
crypto
To specify the IPsec policy to configure, enter:
ipsec policy <policy-name> <peer-address>
To select the IPsec proposal to configure, enter:
proposal <1-5> protocol [esp | ah]
To create the untrusted firewall zone, enter:
firewall internet
To add an interface to the untrusted zone, enter:
interface wan1
exit
To create the trusted corp zone, enter:
firewall corp
Nortel Secure Router 4134
Security — Configuration and Management
NN47263-600 01.02 Standard
10.0 3 August 2007