ADTRAN E1 Bedienungsanleitung PDF herunterladen (Seite 13)

T1/E1 WAN Configuration Guide Creating Access Lists and Policies

The following table provides sample ACL commands for the various traffic on our sample network.

The traffic selectors required for traffic on the connection to the branch office and the local network are

basically identical but contain different IP subnets on the 10.0.0.0 network. If we modify the IP addresses

listed in the permit statements to encompass the entire 10.0.0.0 network (by using 10.0.0.0 with wildcard

bits 0.255.255.255), we can create a single set of ACLs that can be used in ACPs on both interfaces. All

traffic on IP subnets of the 10.0.0.0 network will be allowed to transmit data to one another and the

Internet.

The following activates the security features in the NetVanta and creates two extended ACLs to select our

traffic:

>enable

#config terminal

(config)#ip firewall

(config)#ip access-list extended INTERLAN

(config-ext-nacl)#permit ip 10.0.0.0 0.255.255.255 10.0.0.0 0.255.255.255

(config-ext-nacl)#exit

(config)#ip access-list extended INTERNET

(config-ext-nacl)#permit ip 10.0.0.0 0.255.255.255 any

(config-ext-nacl)#exit

(config)#

Now, create the access policy to allow the traffic between the LANs and to NAT traffic bound for the

public Internet.

(config)#ip policy-class INTERLANwNAT

(config-policy-class)#allow list INTERLAN

(config-policy-class)#nat source list INTERNET interface ppp 1 overload

(config-policy-class)#exit

(config)#

Apply the ACPs to the interface(s) to complete the configuration. For our example, the

INTERLANwNAT ACP should be applied to fr 1.16 (PVC to the branch office) and eth 0/1 (local

network connection).

Action Description Command(s)

Allow traffic between LANs (10.10.4.0/16 to

10.25.15.0/24)

permit ip 10.10.4.0 0.0.0.255 10.25.15.0 0.0.0.255

Allow traffic from remote LAN (10.10.4.0/24) to the

Internet through the PPP interface

permit ip 10.10.4.0 0.0.0.255 any

Allow traffic from Corp LAN (10.25.15.0/24) to remote

LAN (10.10.4.0/24)

permit ip 10.25.15.0 0.0.0.255 10.10.4.0 0.0.0.255

Allow traffic from Corp LAN (10.25.15.0/24) to the

Internet

permit ip 10.10.0.0 0.0.0.255 any

1 2 ... 8 9 10 11 12 13 14 15 16 17 18 ... 21 22

Kommentare zu diesen Handbüchern

Keine Kommentare

ADTRAN E1 Bedienungsanleitung Seite 13

Kommentare zu diesen Handbüchern

Verwandte Produkte und Handbücher für Vernetzung ADTRAN E1