Table of Contents
Advertisement
Chapter 4
Configuring Firewall Devices
You do not need to specify which interface the route is associated with. MARS derives this information
Note
based on the interface settings you have specified for the host.
To define the static routes used by a firewall, follow these steps:
Step 1
Do one of the following:
To specify the route information for the primary management station, click Route Info on the
•
primary management station page.
•
To specify the route information for a firewall child enforcement module, select the server under
Device Type, click Route Info.
Result: The Route Information dialog box appears.
Specify values for the following fields:
Step 2
•
Destination Address — Enter the internal or external destination network address
•
Destination Mask — Enter the corresponding network mask value.
Next Hop Address — Enter the IP address of the default gateway.
•
Metric — Identifies the priority for using a specific route. When routing network packets, a gateway
•
device uses the rule with the most specific network within the rule's definition. Only in cases where
two routing rules have the same network is the metric used to determine which rule is applied. If
they are the same, the lowest metric value takes priority. If no routing rule exists, the network packet
is dropped, and if the gateway is not detected (dead), the network packet is dropped.
A metric is a measurement of the cost of a route based on the number of hops (hop count) to the
network on which a specific host resides. Hop count refers to the number of networks that a network
packet must traverse, including the destination network, before it reaches its final destination.
Because the hop count includes the destination network, all directly connected networks have a
metric of 1. For the metric value, specify a number between 1 and 15.
Click Submit to add the route to the list of routes
Step 3
Repeat
Step 4
Click Close to return to the Access Information page.
Step 5
78-17020-01
•
through
Step 3
for each route defined on the firewall.
User Guide for Cisco Security MARS Local Controller
Check Point Devices
4-51
Advertisement
Table of Contents
Troubleshooting
