Shulou(Shulou.com)06/01 Report--

About the definition of a firewall local zone:

All messages sent actively by the firewall can be considered to be sent from the local area. Anything that requires a firewall response rather than forwarding can be considered to be received by the local zone.

The direction in which messages flow between regions:

The message flows from the high area to the low area.

The message flows from the low area to the high area in the incoming direction.

How to determine which two secure areas the message flows between?

Under the ① three-layer mode: the firewall determines the interface from which the message will be sent by the routing table, and the security area to which the interface belongs is the destination area of the message.

② layer 2 mode: the firewall determines the interface from which the message will be sent according to the MAC address table, and the security zone to which the interface belongs is the destination area of the message.

About, source area: in which area the interface interfaces to the message, the security zone to which the interface belongs is the source security zone of the message.

③ in the × × × scenario, the firewall receives the encapsulated message, unencapsulates the message to get the original message, and then determines the destination security zone through the routing table. In the source area, the firewall uses the method of "reverse lookup routing table" to determine the source security zone of the original message.

Basic configuration of the security zone: there is no level for the new security zone.

Firewall zone name test

Set priority 10mura-create priority

Add interface g0/0/1

FAQ: how many subinterfaces can be configured under a physical interface?

Logic supports 114094; it has not actually been tested! Experienced warriors can inform them in advance.

Welcome to subscribe "Shulou Technology Information " to get latest news, interesting things and hot topics in the IT industry, and controls the hottest and latest Internet news, technology news and IT industry trends.