Blogtrottr
Mobile01最新文章
Cisco ASA 5510真的不支援路由Routeing?
May 20th 2013, 18:06

ASA5500 Series 可當 Router (Routed Firewall Mode) 也可當 Bridge (Transparent Firewall Mode).

當Router時, 可支援許多interfaces, 此時Static Route就有用了

http://www.cisco.com/en/US/docs/security/asa/asa82/configuration/guide/fwmode.html#wp1220886

david666 wrote:
1.同一個 interface 不能打回頭，無論 inside / outside / dmz 都一樣。
2.(香港文章)PIX 唔 support local redirect. 反彈 packet 必閘。
反轉 default 指去 mpls 果隻 router，再 set default route 去 PIX 咁就 work。
3. ASA並沒有路由功能，而且Switch port上會有防Flood機制，也就是說同一封包要轉送時從同一個port去回是會被drop掉的 ...(恕刪)

這些都是有可能的, 小弟會建議在封包進出的各個點上sniff packets以釐清是誰把封包丟掉的

This entry passed through the Full-Text RSS service — if this is your content and you're reading it on someone else's site, please read the FAQ at fivefilters.org/content-only/faq.php#publishers. Five Filters recommends: 'You Say What You Like, Because They Like What You Say' - http://www.medialens.org/index.php/alerts/alert-archive/alerts-2013/731-you-say-what-you-like-because-they-like-what-you-say.html
You are receiving this email because you subscribed to this feed at blogtrottr.com.

If you no longer wish to receive these emails, you can unsubscribe from this feed, or manage all your subscriptions
arrow
arrow
    全站熱搜

    vpnline 發表在 痞客邦 留言(0) 人氣()

    E-mail轉寄