Avaya FireWall-1 Uživatelský manuál

Part No. 117384-A Rev ASeptember 1997BayRS Version 12.00Site Manager Software Version 6.00 Configuring BaySecure FireWall-1

Configuring BaySecure FireWall-1x 117384-A Rev A Conventions angle brackets (< >) Indicate that you choose the text to enter based on the descr

About This Guide 117384-A Rev A xi Ordering Bay Networks Publications To purchase additional copies of this document or other Bay Networks publicati

Configuring BaySecure FireWall-1xii 117384-A Rev A How to Get Help If you purchased a service contract for your Bay Networks product from a distribut

117384-A Rev A 1-1 Chapter 1BaySecure FireWall-1 BaySecure™ FireWall-1 integrates version 2.1 of Check Point Software Technologies Ltd™ FireWall-1™

Configuring BaySecure FireWall-11-2 117384-A Rev A To configure a firewall on a router, see the following sections:• Obtaining a FireWall-1 License on

BaySecure FireWall-1 117384-A Rev A 1-3 Refer to the section “Installing and Running the FireWall-1 Management Software” and the Check Point documen

Configuring BaySecure FireWall-11-4 117384-A Rev A For SunOS lab# mount -r -t hsfs /dev/sr0 /cdrom lab# cd /tmp lab# tar xvf /cdrom/sunos4/fw1/

BaySecure FireWall-1117384-A Rev A 1-5 Sample Installation The following sample installation takes the Check Point FireWall-1 software from a CD-ROM a

Configuring BaySecure FireWall-11-6 117384-A Rev ASoftware distribution extraction--------------------------------Extracting software distribution. Pl

BaySecure FireWall-1117384-A Rev A 1-7 Configuring Remote Modules...=============================Remote Modules are FireWall or Inspection Modules tha

ii 117384-A Rev A4401 Great America Parkway 8 Federal StreetSanta Clara, CA 95054 Billerica, MA 01821 Copyright © 1997 Bay Networks, Inc. All rights

Configuring BaySecure FireWall-11-8 117384-A Rev ADo you wish to start FW-1 now (y/n) [y] ? n*********************************************************

BaySecure FireWall-1117384-A Rev A 1-9 Installing a License on the Management StationTo install a license on the management station, use the following

Configuring BaySecure FireWall-11-10 117384-A Rev AStarting the FireWall-1 GUITo start the FireWall-1 GUI, enter the fwui& command. For example, a

BaySecure FireWall-1117384-A Rev A 1-11 Figure 1-1. Choose Destination Location Window2.Choose a destination directory. For this sample installation,

Configuring BaySecure FireWall-11-12 117384-A Rev A4. Choose the FireWall-1 component you want to install. To be compatible with BaySecure FireWall-1,

BaySecure FireWall-1117384-A Rev A 1-13 The Administrators window (Figure 1-4) opens. Figure 1-4. Administrators Window You must specify at least one

Configuring BaySecure FireWall-11-14 117384-A Rev A10. Click on Next.The GUI Clients window opens. Do not enter GUI clients at this time.11. Click on

BaySecure FireWall-1117384-A Rev A 1-15 The CA Key window opens (Figure 1-7).Figure 1-7. CA Key Window15.Click on Generate to generate a new key.The h

Configuring BaySecure FireWall-11-16 117384-A Rev AFigure 1-8. Choose Destination Location WindowFor this sample installation, accept the default dire

BaySecure FireWall-1117384-A Rev A 1-17 4.Install the Security Policy, System Status, and Log Viewer components by clicking on each item.Customizing t

117384-A Rev A iii Bay Networks, Inc. Software License Agreement NOTICE: Please carefully read this license agreement before copying or using the

Configuring BaySecure FireWall-11-18 117384-A Rev ABegin by starting Site Manager. Then follow these steps:1. Select Configuration Manager in either lo

BaySecure FireWall-1117384-A Rev A 1-19 5.To enable the firewall, select Protocols > Global Protocols > FWALL > Global. The F.W. Global window

Configuring BaySecure FireWall-11-20 117384-A Rev AThe F.W. Router Parameters window opens (Figure 1-12).Figure 1-12. F.W. Router Parameters Window8.C

BaySecure FireWall-1117384-A Rev A 1-21 Parameter: Local Host IP Address Default: 0.0.0.0 Options: Any valid IP address Function: Shows the IP addres

Configuring BaySecure FireWall-11-22 117384-A Rev AWhen you click on OK, a message box opens, confirming that you are enabling the firewall on all inter

BaySecure FireWall-1117384-A Rev A 1-23 The Boot Router window opens (Figure 1-14).Figure 1-14. Boot Router Window2.Specify the correct volume and boo

Configuring BaySecure FireWall-11-24 117384-A Rev AConfiguring a FireWall Security Policy A security policy is a collection of rules that define the way

BaySecure FireWall-1117384-A Rev A 1-25 Troubleshooting ChecklistIf you experience problems with FireWall-1, verify that you have performed these step

117384-A Rev A Index-1Aactivating FireWall-1, 1-22addingadministrators, 1-8groups, 1-8GUI clients, 1-8, 1-17license, 1-8, 1-17remote modules, 1-8, 1-1

iv 117384-A Rev A its own data and information and for maintaining adequate procedures apart from the Software to reconstruct lost or altered files,

Index-2 117384-A Rev Ainstalling management software, 1-4Llicenseadding, 1-8, 1-17installing on management station, 1-9obtaining, 1-2Local Host IP Add

117384-A Rev A v Contents About This Guide Before You Begin ...

vi 117384-A Rev A Installing the Security Policy on the Router ...1-24Troubleshooting

117384-A Rev A vii Figures Figure 1-1. Choose Destination Location Window ...1-11Figure 1-2. Selecti

117384-A Rev A ix About This Guide If you are responsible for network security, you need to read this guide to learn about BaySecure FireWall-1, and