Manuale per l’uso Intel 9525

28 pagine 0.2 mb
Scarica

Vai alla pagina of 28

Summary
  • Intel 9525 - page 1

    DMZ Firewall Solution Intel  Express Route rs 9515, 9525 an d 9535 ...

  • Intel 9525 - page 2

    INFORMATION IN THIS DOCUMENT IS PROVIDED IN CONNECT ION WITH INTEL  PRODUCTS. NO L ICENSE, EXPRESS OR IMPLIED, BY ESTOPPEL OR OTHERWISE, TO ANY INTELLECTUAL PROPERT Y RIGHTS IS GRANTED BY TH IS DOCUMENT. EXCEPT AS PROVIDED IN INT ELS TERMS AND CONDITIONS OF SALE FOR SUCH PRODUCTS, INTEL ASSUMES NO L IABILITY WHATSOEV ER, AND INTEL DISCLAIMS ANY ...

  • Intel 9525 - page 3

    DMZ Firewall Solution fo r the Express Router 07-12-99 Version 1.0 2 Table of Contents 1 Introduction ............................................................................................................................ 3 1.1 About This Document ................................................................................................. ...

  • Intel 9525 - page 4

    DMZ Firewall Solution fo r the Express Router 07-12-99 Version 1.0 3 1 Introduction 1.1 A bout This Document This docum ent explains h ow to config ure a secure I nternet solution u sing the se cond LAN interface of the I ntel  Express router as a DMZ. The D MZ setup is exp lained th rough the use o f two exam ple soluti ons, a Sing le IP A ddre ...

  • Intel 9525 - page 5

    DMZ Firewall Solution fo r the Express Router 07-12-99 Version 1.0 4 The purpose of this se tup is to p rohibit any direct da ta transm ission betwee n the I nternet and the secure ne twork. Al l data m ust go thr ough proxy serv ers on the DMZ . We recom mend that y ou set up the DMZ on the LAN2 (10 Mb ps) port and your secure network on the LAN1 ...

  • Intel 9525 - page 6

    DMZ Firewall Solution fo r the Express Router 07-12-99 Version 1.0 5 2.2 Routing Setup Do not use R IP on the WAN interf ace or the D MZ in terface. This prev ents intr uders from corrupting the rou ting table. If there i s more th an one in ternal ne twork, the rou ter m ust not be used a s prim ary g ateway because the router conf ig ura tion onl ...

  • Intel 9525 - page 7

    DMZ Firewall Solution fo r the Express Router 07-12-99 Version 1.0 6 3 DMZ Single IP A ddress Solution This solu tion explains h ow to set up a D MZ solut ion when the I nternet serv ice provide r (ISP) has assigned a single I P address to y our netwo rk. Intel Express Router HTTP/FTP (Web) server 10.2.0.1 Mail server 10.5.0.1 HTTP/FTP proxy server ...

  • Intel 9525 - page 8

    DMZ Firewall Solution fo r the Express Router 07-12-99 Version 1.0 7 Note The order o f the NA T en tries is importan t. NAT entr ies are de fined as f ollows : Entry Functi on Settings 1 Directs all in coming HTTP requests to the Web server. Mapping type: Static Po rt (Sing le IP) Internal a ddress: 10.2.0.1 Internal po rt: 80 External I P address ...

  • Intel 9525 - page 9

    DMZ Firewall Solution fo r the Express Router 07-12-99 Version 1.0 8 Filters are de fined as fol lows: Filter Functi on Settings — Prohibit use rs on th e secure ne twork access to th e I nternet Default Action: Discar d 1 Allows access to t he HTTP /F TP proxy serv er on the DMZ . Action : Pass Protocol: A ll Dest. addr ess type: Host Dest. addr ...

  • Intel 9525 - page 10

    DMZ Firewall Solution fo r the Express Router 07-12-99 Version 1.0 9 Filter Functi on Settings Src. address : 10.2.0.2 Src. port: = 80 2 Allows FTP (on ly passiv e connections ) from secur e LAN to the F TP proxy server on the DMZ (see note 1). Two filte rs are req ui red. Action : Pass Protocol: TCP TCP flags: ACK Dest. addr ess type: All Dest. po ...

  • Intel 9525 - page 11

    DMZ Firewall Solution fo r the Express Router 07-12-99 Version 1.0 10 Filter Functi on Settings Dest. address : 10.5.0.2 Dest. port: > 1023 Src. addre ss type: Host Src. address : 10.2.0.4 Src. port: = 119 8 Sends all pack ets genera ted by the r outer to the se cure LAN (LA N1). Action : Pass Protocol: TCP TCP flags: All Dest. addr ess type: Al ...

  • Intel 9525 - page 12

    DMZ Firewall Solution fo r the Express Router 07-12-99 Version 1.0 11 Filters are de fined as fol lows: Filter Functi on Settings — Pass all pack ets dest ined for D MZ Default A ction: Pass 1 Prevents RI P updates from entering the DMZ network Acti on: Discar d Protocol: UDP Dest. addr ess type: All Dest. port: RIP Src. addre ss type: All Src. p ...

  • Intel 9525 - page 13

    DMZ Firewall Solution fo r the Express Router 07-12-99 Version 1.0 12 Filter Functi on Settings Scr. addre ss type: Host Src. address : <LAN1 I P address> Src. port : All 9 Discards all I CMP packets en tering th e DMZ network . This prev ents the ro uter from repor ting the I P netm ask. Acti on: Discar d Protocol: I CMP Dest. addr ess type: ...

  • Intel 9525 - page 14

    DMZ Firewall Solution fo r the Express Router 07-12-99 Version 1.0 13 3.3.3 Internet Co nnection Fi lters 3.3.3.1 Receive (Rx) Filters on the connection to the Interne t Configure these rece ive fil ters for the Intern et connect ion, shown as th ey appear in Adva nced Setup . × Filters are de fined as fol lows: Filter Functi on Settings — Prohi ...

  • Intel 9525 - page 15

    DMZ Firewall Solution fo r the Express Router 07-12-99 Version 1.0 14 Filter Functi on Settings 2 Allows FTP (bo th activ e and passiv e) from the I nterne t to the H TTP/F TP server on the DMZ . Three fi lters are r equired. Action : Pass Protocol: TCP TCP flags: All Dest. addr ess type: Host Dest. address : 10.2.0.1 Dest. port: = 21 Src. addre ss ...

  • Intel 9525 - page 16

    DMZ Firewall Solution fo r the Express Router 07-12-99 Version 1.0 15 Filter Functi on Settings Dest. address : 10.2.0.2 Dest. port > 1023 Src. addre ss type: All Src. port: > 1023 9 Allows D NS reply to the HT TP/F TP proxy serv er on the DMZ . Two filte rs are req u ired. Action : Pass Protocol: TCP TCP flags: ACK Dest. addr ess type: Host ...

  • Intel 9525 - page 17

    DMZ Firewall Solution fo r the Express Router 07-12-99 Version 1.0 16 Filter Functi on Settings Dest. addr ess type: Host Dest. address : 10.2.0.3 Dest. port > 1023 Src. addre ss type: All Src. port: = 25 15 Allows incom ing News (NNTP) from a specified external N ews serv er to the DMZ (see no te 2). Action : Pass Protocol: TCP TCP flags: All D ...

  • Intel 9525 - page 18

    DMZ Firewall Solution fo r the Express Router 07-12-99 Version 1.0 17 4 DMZ Multiple IP A ddress Solution This solu tion explains h ow to set up a D MZ when the I SP supplies y ou with mult iple IP addresses. I n the exam ple, the I SP has assig ned the si te a range o f IP addresses: 193.84 .251.0 to 193.84.251.7 (subne t mask 255.255.255.248). In ...

  • Intel 9525 - page 19

    DMZ Firewall Solution fo r the Express Router 07-12-99 Version 1.0 18 4.3 Network Address Trans lation (NA T) Because the se cure priv ate netwo rks on LAN1 use public IP addresses (8 9.20.0.0 and 90.20.0.0 ), configure N AT to tr anslate t hese addres ses to priv ate I P addresses. Fo r exam ple, NAT wil l translate the E-m ail server a ddress fr ...

  • Intel 9525 - page 20

    DMZ Firewall Solution fo r the Express Router 07-12-99 Version 1.0 19 Filters are de fined as fol lows: Filter Functi on Settings — Prohibit interna l users acc ess to the Int e r ne t Defaul t Action: Defaul t 1 Allow s access to the H TTP /FTP pro xy server on the DMZ . Action : Pass Protocol: A ll Dest. addr ess type: Host Dest. address : 193. ...

  • Intel 9525 - page 21

    DMZ Firewall Solution fo r the Express Router 07-12-99 Version 1.0 20 Filter Functi on Settings Src. port: = 80 2 Allows F TP (only pass ive conne ctions) from secur e LAN to the F TP proxy server on the DMZ (see note 1). Two filte rs are req ui red. Action : Pass Protocol: TCP TCP flags: ACK Dest. addr ess type: All Dest port: >1023 Src. addre ...

  • Intel 9525 - page 22

    DMZ Firewall Solution fo r the Express Router 07-12-99 Version 1.0 21 Filter Functi on Settings Dest. port: > 1023 Src. addre ss type: Host Src. address : 193.84.251.4 Src. port: 119 8 Sends a ll packets g enerated by the router to t he intern al LAN (LAN1 ). Action: Pass Protocol: TCP TCP flags: All Dest. addr ess type: All Dest. port: All Src. ...

  • Intel 9525 - page 23

    DMZ Firewall Solution fo r the Express Router 07-12-99 Version 1.0 22 Filter Functi on Settings Src. addre ss type: All Src. port: All 2 Prev ents tunnel p ackets from entering the DMZ network Acti on: Discar d Protocol: TCP Dest. addr ess type: All Dest port: Tunnel Src. addre ss type: All Src. port: All 3 Prev ents RSVP p ackets from enter ing th ...

  • Intel 9525 - page 24

    DMZ Firewall Solution fo r the Express Router 07-12-99 Version 1.0 23 Filter Functi on Settings 9 Discards all I CMP packets en tering th e DMZ network . This prev ents the ro uter from repor ting the I P netm ask. These filters m ust inc lude all I P addresses on the router, including the WAN IP address if the rou ter is usin g num bered links. Ac ...

  • Intel 9525 - page 25

    DMZ Firewall Solution fo r the Express Router 07-12-99 Version 1.0 24 4.4.2. 2 Transmit (Tx) filters on LAN2 Set the de fault ac tion to Pass . 4.4.3 Internet Co nnection Fi lters 4.4.3.1 Receive (Rx) Filters on the Connection to the Internet The requi red receiv e filters f or the I nternet connection, s hown as they appear in Advanced Setup . × ...

  • Intel 9525 - page 26

    DMZ Firewall Solution fo r the Express Router 07-12-99 Version 1.0 25 Filter Functi on Settings Src. port: > 1023 2 Allows F TP (both act ive and pass ive) from the I nterne t to the H TTP/F TP server on the DMZ . Three fi lters are r equired. Action : Pass Protocol: TCP TCP flags: All Dest. addr ess type: Host Dest. address : 193.84.251 .1 dest ...

  • Intel 9525 - page 27

    DMZ Firewall Solution fo r the Express Router 07-12-99 Version 1.0 26 Filter Functi on Settings Dest. addr ess type: Host Dest. address : 193.84.251.2 Dest. port > 1023 Src. addre ss type: All Src. port: = 21 9 Allow s DNS r eply to the HTTP /FTP proxy serv er on the DMZ . Two filte rs are req u ired. Action : Pass Protocol: TCP TCP flags: ACK D ...

  • Intel 9525 - page 28

    DMZ Firewall Solution fo r the Express Router 07-12-99 Version 1.0 27 Filter Functi on Settings 14 Allows outg oing m ail (SMTP) to any host on th e Interne t from the DMZ. Action : Pass Protocol: TCP TCP flags: ACK Dest. addr ess type: Host Dest. address : 193.84.251.3 Dest. port > 1023 Src. addre ss type: All Src. port: = 25 15 Allows incoming ...

Fabbricante Intel Categoria Saw

I documenti che otteniamo dal fabbricante del dispositivoIntel 9525 possono essere suddivisi in diversi gruppi. Questi sono tra gli altri:
- disegni tecnici Intel
- manuali per l’uso 9525
- schede prodotto Intel
- opuscoli
- o etichette energetiche Intel 9525
Tutti sono importanti, ma le informazioni più importanti dal punto di vista di utilizzo del dispositivo possono essere trovate nel manuale per l’uso Intel 9525.

Un gruppo di documenti denominato manuali per l’uso, è anche suddiviso in tipi più specifici, come: Manuali di installazione Intel 9525, manuali di manutenzione, brevi manuali o manuali utente Intel 9525. A seconda delle esigenze, si dovrebbe cercare il documento necessario. Nel nostro sito web, puoi visualizzare il manuale più popolare per l'uso del prodotto Intel 9525.

Manuali per l’uso simili

Manuale completo del dispositivo Intel 9525, come deve essere?
Il manuale per l’uso, denominato anche istruzioni per l’uso, o semplicemente il manuale è un documento tecnico progettato per aiutare ad utilizzare Intel 9525 dagli utenti. I manuali sono di solito scritti da uno scrittore tecnico, ma in un linguaggio accessibile a tutti gli utenti Intel 9525.

Il manuale per l’uso completo Intel, dovrebbe includere vari elementi di base. Alcuni di loro sono meno importanti, come ad esempio: copertina / pagina del titolo o pagina di autore. Tuttavia, la parte rimanente, dovrebbe fornire informazioni importanti dal punto di vista dell'utente.

1. Introduzione e la guida su come utilizzare il manuale Intel 9525 - All'inizio di ogni manuale, dovremmo trovare indizi su come utilizzare il documento. Dovrebbe contenere informazioni sulla posizione dell’indice Intel 9525, FAQ o i problemi più comuni : i punti che sono più spesso cercati dagli utenti di ogni manuale
2. Indice - elenco di tutti i suggerimenti per Intel 9525 che possono essere trovati nel documento corrente
3. Suggerimenti su come utilizzare le funzioni di base del dispositivo Intel 9525 - che ci dovrebbe aiutare nei primi passi durante l'uso Intel 9525
4. Troubleshooting - sequenza sistematica delle attività che vi aiuterà a diagnosticare e, successivamente, risolvere i problemi più importanti del Intel 9525
5. FAQ - domande più frequenti
6. Dettagli di contatto Informazioni su dove cercare il contatto con il fabbricante / servizio Intel 9525 in un dato paese, se il problema non può essere risolto da noi stessi.

Hai una domanda su Intel 9525?

Utilizza il modulo sottostante

Se non hai risolto il problema con Intel 9525 con l'aiuto del manuale che hai trovato, fai una domanda utilizzando il modulo sottostante. Se un utente ha avuto un problema simile con Intel 9525 è probabile che voglia condividere il modo di risolverlo.

Riscrivi il testo dall’immagine

Commenti (0)