Step 11: Configure Firewall Policies To Allow Ike Negotiation Through Untrusted Interface; Step 12: Configure Firewall Policies To Allow Desired Services Through Untrusted Interface To Manage The Router; Step 13: Display Firewall Policies In The Internet Map; Step 14: Display Firewall Policies In The Internet Map In Detail - Avaya 1000 Series Configuration Manual

Step 11: Configure firewall policies to allow IKE negotiation through
untrusted interface
Networks1/configure> firewall internet
Networks1/configure/firewall internet> policy 1000 in service ike self
Networks1/configure/firewall internet/policy 1000 in> exit
Networks1/configure/firewall internet> exit
Step 12: Configure firewall policies to allow desired services
through untrusted interface to manage the router
Networks1/configure> firewall internet
Networks1/configure/firewall internet> policy 1001 in service snmp self
Networks1/configure/firewall internet/policy 1001 in> exit
Networks1/configure/firewall internet> policy 1002 in service telnet self
Networks1/configure/firewall internet/policy 1002 in> exit
Networks1/configure/firewall internet> policy 1003 in protocol icmp self
Networks1/configure/firewall internet/policy 1003 in> exit
Networks1/configure/firewall internet> exit

Step 13: Display firewall policies in the Internet map

Networks1> show firewall policy internet

Step 14: Display firewall policies in the Internet map in detail

Networks1> show firewall policy internet detail
Avaya Secure Router 1000 Series Configuration Guide
Example 1: Securely Managing the Secure Router 1000 Series Over an IPSec Tunnel
December 2010 141