Samsung Ubigate iBG3026 Configuration Manual page 302

CHAPTER 25. IPSEC
Proposal of priority 1
11.
Configure firewall policies to allow IKE negotiation through untrusted
interface.
Router/configure# firewall internet
Router/configure/firewall internet# policy 1000 in service
ike self
Router/configure/firewall internet/policy 1000 in# exit
Router/configure/firewall internet# exit
12.
Configure firewall policies to allow desired services through untrusted
interface to manage the router.
Router/configure# firewall internet
Router/configure/firewall internet# policy 1001 in service
snmp self
Router/configure/firewall internet/policy 1001 in# exit
Router/configure/firewall internet# policy 1002 in service
telnet self
Router/configure/firewall internet/policy 1002 in# exit
Router/configure/firewall internet# policy 1003 in protocol
icmp self
13.
Display firewall policies in the internet map.
Router# show firewall policy internet
Advanced: S-Self Traffic, F-Ftp-Filter, H-Http-Filter,
Pri Dir Source Addr Destination Addr Sport Dport Proto
Action Advanced
--- --- ----------- ---------------- ----------------- -----
- --------
262
Protocol: esp
Mode: tunnel
Encryption Algorithm: aes128(key length=128 bits)
Hash Algorithm: sha1
Lifetime in seconds: 3600
Lifetime in Kilobytes: 4608000
R-Rpc-Filter, N-Nat-Ip/Nat-Pool, L-Logging,
E-Policy Enabled, M-Smtp-Filter
© SAMSUNG Electronics Co., Ltd.