Allied Telesis AT-iMG634 - R2 User's Guide Page 361

  • Download
  • Add to my manuals
  • Print
  • Page
    / 998
  • Table of contents
  • BOOKMARKS
  • Rated. / 5. Based on customer reviews
Page view 360
Security interfaces Security
4-59
iMG/RG Software Reference Manual (IPNetwork Functions)
An Internal interface is an IP interface that is attached to a network that needs to be protected from the
network attached to the External interface. For example, an interface attached to a private LAN is an inter-
nal interface.
The External interface is an IP interface that is attached to a network, for example the Internet, containing
hosts that may pose a security threat to hosts on the internal interfaces.
A DMZ (demilitarized zone) is an IP interface serving a small network that acts as a neutral zone between
the inside network and the outside network. A DMZ is a portion of the local network that is almost com-
pletely open to the external network. There may be some restriction at external access to the DMZ, but
much less than the restriction of access to the internal interface.
To define an IP interface use the IP ADD INTERFACE command. (ref to ip command list)
To define an existing IP interface as a security interface use the SECURITY ADD INTERFACE command.
To s h o w t h e security interfaces currently defined, use the SECURITY LIST INTERFACES command.
Note: Only one external security interface and one DMZ security interface can be defined
Note: Security interfaces must be created before you can configure the majority of the features of the security
package
FIGURE 4-2 Security interfaces on AT-iMG Models
Internal interface
DMZ interface
External interface
Internal interface
Internal interface
External
Network
Internal
Network
DMZ
Network
Internal
Network
Internal
Network
Page view 360
1 2 ... 356 357 358 359 360 361 362 363 364 365 366 ... 997 998

Comments to this Manuals

No comments