Manual Intel 9515

28 pages 0.2 mb
Download

Go to site of 28

Summary
  • Intel 9515 - page 1

    DMZ Firewall Solution Intel  Express Route rs 9515, 9525 an d 9535 ...

  • Intel 9515 - page 2

    INFORMATION IN THIS DOCUMENT IS PROVIDED IN CONNECT ION WITH INTEL  PRODUCTS. NO L ICENSE, EXPRESS OR IMPLIED, BY ESTOPPEL OR OTHERWISE, TO ANY INTELLECTUAL PROPERT Y RIGHTS IS GRANTED BY TH IS DOCUMENT. EXCEPT AS PROVIDED IN INT ELS TERMS AND CONDITIONS OF SALE FOR SUCH PRODUCTS, INTEL ASSUMES NO L IABILITY WHATSOEV ER, AND INTEL DISCLAIMS ANY ...

  • Intel 9515 - page 3

    DMZ Firewall Solution fo r the Express Router 07-12-99 Version 1.0 2 Table of Contents 1 Introduction ............................................................................................................................ 3 1.1 About This Document ................................................................................................. ...

  • Intel 9515 - page 4

    DMZ Firewall Solution fo r the Express Router 07-12-99 Version 1.0 3 1 Introduction 1.1 A bout This Document This docum ent explains h ow to config ure a secure I nternet solution u sing the se cond LAN interface of the I ntel  Express router as a DMZ. The D MZ setup is exp lained th rough the use o f two exam ple soluti ons, a Sing le IP A ddre ...

  • Intel 9515 - page 5

    DMZ Firewall Solution fo r the Express Router 07-12-99 Version 1.0 4 The purpose of this se tup is to p rohibit any direct da ta transm ission betwee n the I nternet and the secure ne twork. Al l data m ust go thr ough proxy serv ers on the DMZ . We recom mend that y ou set up the DMZ on the LAN2 (10 Mb ps) port and your secure network on the LAN1 ...

  • Intel 9515 - page 6

    DMZ Firewall Solution fo r the Express Router 07-12-99 Version 1.0 5 2.2 Routing Setup Do not use R IP on the WAN interf ace or the D MZ in terface. This prev ents intr uders from corrupting the rou ting table. If there i s more th an one in ternal ne twork, the rou ter m ust not be used a s prim ary g ateway because the router conf ig ura tion onl ...

  • Intel 9515 - page 7

    DMZ Firewall Solution fo r the Express Router 07-12-99 Version 1.0 6 3 DMZ Single IP A ddress Solution This solu tion explains h ow to set up a D MZ solut ion when the I nternet serv ice provide r (ISP) has assigned a single I P address to y our netwo rk. Intel Express Router HTTP/FTP (Web) server 10.2.0.1 Mail server 10.5.0.1 HTTP/FTP proxy server ...

  • Intel 9515 - page 8

    DMZ Firewall Solution fo r the Express Router 07-12-99 Version 1.0 7 Note The order o f the NA T en tries is importan t. NAT entr ies are de fined as f ollows : Entry Functi on Settings 1 Directs all in coming HTTP requests to the Web server. Mapping type: Static Po rt (Sing le IP) Internal a ddress: 10.2.0.1 Internal po rt: 80 External I P address ...

  • Intel 9515 - page 9

    DMZ Firewall Solution fo r the Express Router 07-12-99 Version 1.0 8 Filters are de fined as fol lows: Filter Functi on Settings — Prohibit use rs on th e secure ne twork access to th e I nternet Default Action: Discar d 1 Allows access to t he HTTP /F TP proxy serv er on the DMZ . Action : Pass Protocol: A ll Dest. addr ess type: Host Dest. addr ...

  • Intel 9515 - page 10

    DMZ Firewall Solution fo r the Express Router 07-12-99 Version 1.0 9 Filter Functi on Settings Src. address : 10.2.0.2 Src. port: = 80 2 Allows FTP (on ly passiv e connections ) from secur e LAN to the F TP proxy server on the DMZ (see note 1). Two filte rs are req ui red. Action : Pass Protocol: TCP TCP flags: ACK Dest. addr ess type: All Dest. po ...

  • Intel 9515 - page 11

    DMZ Firewall Solution fo r the Express Router 07-12-99 Version 1.0 10 Filter Functi on Settings Dest. address : 10.5.0.2 Dest. port: > 1023 Src. addre ss type: Host Src. address : 10.2.0.4 Src. port: = 119 8 Sends all pack ets genera ted by the r outer to the se cure LAN (LA N1). Action : Pass Protocol: TCP TCP flags: All Dest. addr ess type: Al ...

  • Intel 9515 - page 12

    DMZ Firewall Solution fo r the Express Router 07-12-99 Version 1.0 11 Filters are de fined as fol lows: Filter Functi on Settings — Pass all pack ets dest ined for D MZ Default A ction: Pass 1 Prevents RI P updates from entering the DMZ network Acti on: Discar d Protocol: UDP Dest. addr ess type: All Dest. port: RIP Src. addre ss type: All Src. p ...

  • Intel 9515 - page 13

    DMZ Firewall Solution fo r the Express Router 07-12-99 Version 1.0 12 Filter Functi on Settings Scr. addre ss type: Host Src. address : <LAN1 I P address> Src. port : All 9 Discards all I CMP packets en tering th e DMZ network . This prev ents the ro uter from repor ting the I P netm ask. Acti on: Discar d Protocol: I CMP Dest. addr ess type: ...

  • Intel 9515 - page 14

    DMZ Firewall Solution fo r the Express Router 07-12-99 Version 1.0 13 3.3.3 Internet Co nnection Fi lters 3.3.3.1 Receive (Rx) Filters on the connection to the Interne t Configure these rece ive fil ters for the Intern et connect ion, shown as th ey appear in Adva nced Setup . × Filters are de fined as fol lows: Filter Functi on Settings — Prohi ...

  • Intel 9515 - page 15

    DMZ Firewall Solution fo r the Express Router 07-12-99 Version 1.0 14 Filter Functi on Settings 2 Allows FTP (bo th activ e and passiv e) from the I nterne t to the H TTP/F TP server on the DMZ . Three fi lters are r equired. Action : Pass Protocol: TCP TCP flags: All Dest. addr ess type: Host Dest. address : 10.2.0.1 Dest. port: = 21 Src. addre ss ...

  • Intel 9515 - page 16

    DMZ Firewall Solution fo r the Express Router 07-12-99 Version 1.0 15 Filter Functi on Settings Dest. address : 10.2.0.2 Dest. port > 1023 Src. addre ss type: All Src. port: > 1023 9 Allows D NS reply to the HT TP/F TP proxy serv er on the DMZ . Two filte rs are req u ired. Action : Pass Protocol: TCP TCP flags: ACK Dest. addr ess type: Host ...

  • Intel 9515 - page 17

    DMZ Firewall Solution fo r the Express Router 07-12-99 Version 1.0 16 Filter Functi on Settings Dest. addr ess type: Host Dest. address : 10.2.0.3 Dest. port > 1023 Src. addre ss type: All Src. port: = 25 15 Allows incom ing News (NNTP) from a specified external N ews serv er to the DMZ (see no te 2). Action : Pass Protocol: TCP TCP flags: All D ...

  • Intel 9515 - page 18

    DMZ Firewall Solution fo r the Express Router 07-12-99 Version 1.0 17 4 DMZ Multiple IP A ddress Solution This solu tion explains h ow to set up a D MZ when the I SP supplies y ou with mult iple IP addresses. I n the exam ple, the I SP has assig ned the si te a range o f IP addresses: 193.84 .251.0 to 193.84.251.7 (subne t mask 255.255.255.248). In ...

  • Intel 9515 - page 19

    DMZ Firewall Solution fo r the Express Router 07-12-99 Version 1.0 18 4.3 Network Address Trans lation (NA T) Because the se cure priv ate netwo rks on LAN1 use public IP addresses (8 9.20.0.0 and 90.20.0.0 ), configure N AT to tr anslate t hese addres ses to priv ate I P addresses. Fo r exam ple, NAT wil l translate the E-m ail server a ddress fr ...

  • Intel 9515 - page 20

    DMZ Firewall Solution fo r the Express Router 07-12-99 Version 1.0 19 Filters are de fined as fol lows: Filter Functi on Settings — Prohibit interna l users acc ess to the Int e r ne t Defaul t Action: Defaul t 1 Allow s access to the H TTP /FTP pro xy server on the DMZ . Action : Pass Protocol: A ll Dest. addr ess type: Host Dest. address : 193. ...

  • Intel 9515 - page 21

    DMZ Firewall Solution fo r the Express Router 07-12-99 Version 1.0 20 Filter Functi on Settings Src. port: = 80 2 Allows F TP (only pass ive conne ctions) from secur e LAN to the F TP proxy server on the DMZ (see note 1). Two filte rs are req ui red. Action : Pass Protocol: TCP TCP flags: ACK Dest. addr ess type: All Dest port: >1023 Src. addre ...

  • Intel 9515 - page 22

    DMZ Firewall Solution fo r the Express Router 07-12-99 Version 1.0 21 Filter Functi on Settings Dest. port: > 1023 Src. addre ss type: Host Src. address : 193.84.251.4 Src. port: 119 8 Sends a ll packets g enerated by the router to t he intern al LAN (LAN1 ). Action: Pass Protocol: TCP TCP flags: All Dest. addr ess type: All Dest. port: All Src. ...

  • Intel 9515 - page 23

    DMZ Firewall Solution fo r the Express Router 07-12-99 Version 1.0 22 Filter Functi on Settings Src. addre ss type: All Src. port: All 2 Prev ents tunnel p ackets from entering the DMZ network Acti on: Discar d Protocol: TCP Dest. addr ess type: All Dest port: Tunnel Src. addre ss type: All Src. port: All 3 Prev ents RSVP p ackets from enter ing th ...

  • Intel 9515 - page 24

    DMZ Firewall Solution fo r the Express Router 07-12-99 Version 1.0 23 Filter Functi on Settings 9 Discards all I CMP packets en tering th e DMZ network . This prev ents the ro uter from repor ting the I P netm ask. These filters m ust inc lude all I P addresses on the router, including the WAN IP address if the rou ter is usin g num bered links. Ac ...

  • Intel 9515 - page 25

    DMZ Firewall Solution fo r the Express Router 07-12-99 Version 1.0 24 4.4.2. 2 Transmit (Tx) filters on LAN2 Set the de fault ac tion to Pass . 4.4.3 Internet Co nnection Fi lters 4.4.3.1 Receive (Rx) Filters on the Connection to the Internet The requi red receiv e filters f or the I nternet connection, s hown as they appear in Advanced Setup . × ...

  • Intel 9515 - page 26

    DMZ Firewall Solution fo r the Express Router 07-12-99 Version 1.0 25 Filter Functi on Settings Src. port: > 1023 2 Allows F TP (both act ive and pass ive) from the I nterne t to the H TTP/F TP server on the DMZ . Three fi lters are r equired. Action : Pass Protocol: TCP TCP flags: All Dest. addr ess type: Host Dest. address : 193.84.251 .1 dest ...

  • Intel 9515 - page 27

    DMZ Firewall Solution fo r the Express Router 07-12-99 Version 1.0 26 Filter Functi on Settings Dest. addr ess type: Host Dest. address : 193.84.251.2 Dest. port > 1023 Src. addre ss type: All Src. port: = 21 9 Allow s DNS r eply to the HTTP /FTP proxy serv er on the DMZ . Two filte rs are req u ired. Action : Pass Protocol: TCP TCP flags: ACK D ...

  • Intel 9515 - page 28

    DMZ Firewall Solution fo r the Express Router 07-12-99 Version 1.0 27 Filter Functi on Settings 14 Allows outg oing m ail (SMTP) to any host on th e Interne t from the DMZ. Action : Pass Protocol: TCP TCP flags: ACK Dest. addr ess type: Host Dest. address : 193.84.251.3 Dest. port > 1023 Src. addre ss type: All Src. port: = 25 15 Allows incoming ...

Manufacturer Intel Category Saw

Documents that we receive from a manufacturer of a Intel 9515 can be divided into several groups. They are, among others:
- Intel technical drawings
- 9515 manuals
- Intel product data sheets
- information booklets
- or energy labels Intel 9515
All of them are important, but the most important information from the point of view of use of the device are in the user manual Intel 9515.

A group of documents referred to as user manuals is also divided into more specific types, such as: Installation manuals Intel 9515, service manual, brief instructions and user manuals Intel 9515. Depending on your needs, you should look for the document you need. In our website you can view the most popular manual of the product Intel 9515.

Similar manuals

A complete manual for the device Intel 9515, how should it look like?
A manual, also referred to as a user manual, or simply "instructions" is a technical document designed to assist in the use Intel 9515 by users. Manuals are usually written by a technical writer, but in a language understandable to all users of Intel 9515.

A complete Intel manual, should contain several basic components. Some of them are less important, such as: cover / title page or copyright page. However, the remaining part should provide us with information that is important from the point of view of the user.

1. Preface and tips on how to use the manual Intel 9515 - At the beginning of each manual we should find clues about how to use the guidelines. It should include information about the location of the Contents of the Intel 9515, FAQ or common problems, i.e. places that are most often searched by users in each manual
2. Contents - index of all tips concerning the Intel 9515, that we can find in the current document
3. Tips how to use the basic functions of the device Intel 9515 - which should help us in our first steps of using Intel 9515
4. Troubleshooting - systematic sequence of activities that will help us diagnose and subsequently solve the most important problems with Intel 9515
5. FAQ - Frequently Asked Questions
6. Contact detailsInformation about where to look for contact to the manufacturer/service of Intel 9515 in a specific country, if it was not possible to solve the problem on our own.

Do you have a question concerning Intel 9515?

Use the form below

If you did not solve your problem by using a manual Intel 9515, ask a question using the form below. If a user had a similar problem with Intel 9515 it is likely that he will want to share the way to solve it.

Copy the text from the picture

Comments (0)