How Do I Modify An Existing Firewall To Permit Traffic From A New Network Or Host; How Do I Configure Nat On An Unsupported Interface - Cisco OL-4015-08 User Manual

How Do I...
How Do I Modify an Existing Firewall to Permit Traffic from a
New Network or Host?
Step 1
Step 2
Step 3
Step 4
Step 5
Step 6
Step 7

How Do I Configure NAT on an Unsupported Interface?

Cisco Router and Security Device Manager Version 2.2 User's Guide
5-16
You can use the Edit Firewall Policy tab to modify your firewall configuration to
permit traffic from a new network or host.
From the left frame, select Firewall and ACL.
Click the Edit Firewall Policy tab.
In the traffic selection panel select a From interface and a To interface to specify
the traffic flow to which the firewall has been applied, and click Go. A firewall
icon will appear in the router graphic if a firewall has been applied to the traffic
flow. If the traffic flow you select does not display the access rule you need to
modify, select a different From interface or a different To interface.
Examine the access rule in the Service area. Use the Add button to disp.lay a
dialog for a new access rule entry.
Enter a permit statement for the network or host you want to allow access to the
network. Click OK in the rule entry dialog.
The new entry appears in the service area..
Use the Cut and Paste buttons to reorder the entry to a different position in the
list if you need to do so.
SDM can configure Network Address Translation (NAT) on an interface type
unsupported by SDM. Before you can configure the firewall, you must first use
the router CLI to configure the interface. The interface must have, at a minimum,
an IP address configured, and it must be working. To verify that the connection is
working, verify that the interface status is "Up."
After you have configured the unsupported interface using the CLI, you can
configure NAT . The unsupported interface will appear as "Other" on the router
interface list.
Chapter 5 Create Firewall
OL-4015-08