How Do I Configure A Firewall On An Unsupported Interface; How Do I Configure A Firewall After I Have Configured A Vpn - Cisco ROUTER-SDM-CD User Manual

Chapter 8 Create Firewall

How Do I Configure a Firewall on an Unsupported Interface?

How Do I Configure a Firewall After I Have Configured a VPN?

OL-4015-12
Cisco SDM can configure a
SDM. Before you can configure the firewall, you must first use the router
configure the interface. The interface must have, at a minimum, an IP address
configured, and it must be working. For more information on how to configure an
interface using the CLI, refer to the Software Configuration Guide for your router.
To verify that the connection is working, verify that the interface status is "Up" in
the Interfaces and Connections window.
The following is an exerpt showing the configuration for an ISDN interface on a
Cisco 3620 router:
!
isdn switch-type basic-5ess
!
interface BRI0/0
! This is the data BRI WIC
ip unnumbered Ethernet0/0
no ip directed-broadcast
encapsulation ppp
no ip mroute-cache
dialer map ip 100.100.100.100 name junky 883531601
dialer hold-queue 10
isdn switch-type basic-5ess
isdn tei-negotiation first-call
isdn twait-disable
isdn spid1 80568541630101 6854163
isdn incoming-voice modem
Other configurations are available in the Software Configuration Guide for your
router.
After you have configured the unsupported interface using the CLI, you canuse
Cisco SDM to configure the firewall. The unsupported interface will appear as
"Other" in the fields listing the router interfaces.
If a firewall is placed on an interface used in a VPN, the firewall must permit
traffic between the local and remote VPN peers. If you use the Basic or Advanced
Firewall wizard, Cisco SDM will automatically permit traffic to flow between
VPN peers.
Cisco Router and Security Device Manager 2.5 User's Guide
firewall on an interface type unsupported by Cisco
How Do I...
CLI to
8-17