防火墙-题目翻译.docVIP

PT Activity: Configuring a Zone-Based Policy Firewall (ZPF) PT 任务：创建一个基于域策略的防火墙 Addressing Table（地址表） Device Interface IP Address Subnet Mask Default Gateway R1 Fa0/1 N/A S0/0/0 52 N/A R2 S0/0/0 52 N/A S0/0/1 52 N/A R3 Fa0/1 N/A S0/0/1 52 N/A PC-A NIC PC-C NIC Learning Objectives ??????????Verify connectivity among devices before firewall configuration. ??????????Configure a zone-based policy (ZPF) firewall on router R3 ??????????Verify ZPF firewall functionality using ping, Telnet and a web browser. 学习目标： 在进行防火墙配置之前，确保各设备之间的连通性。 在R3配置ZPF。 使用Ping，Telnet和web browser来验证防火墙的作用。 Introduction Zone-based policy (ZPF) firewalls are the latest development in the evolution of Cisco firewall technologies.?In this activity, you configure a basic ZPF on an edge router R3 that allows internal hosts access to external resources and blocks external hosts from accessing internal resources. You then verify firewall functionality from internal and external hosts. The routers have been pre-configured with the following: ??????????Console password:?ciscoconpa55 ??????????Password for vty lines:?ciscovtypa55 ??????????Enable password:?ciscoenpa55 ??????????Host names and IP addressing ??????????Static routing 介绍： ZPF防火墙是思科公司近期研发的技术之一，在这个任务中，我们在边界路由器R3中配置策略，运行内部主机可以访问外部资源，相反的，不允许外界主机访问内网的资源。 路由器中已经配置好的参数如下： ??????????控制台密码:?ciscoconpa55 ??????????Password for vty lines:?ciscovtypa55 ??????????Enable password:?ciscoenpa55 主机的名字和IP地址 静态路由。 Task 1: Verify Basic Network Connectivity Verify network connectivity prior to configuring the zone-based policy firewall. Step 1. From the PC-A command prompt, ping PC-C at . Step 2. From the PC-C command prompt, Telnet to the Router R2 S0/0/1 interface at . Exit the Telnet session. Step 3. From PC-C, open a web browser to the PC-A server. Click the?Desktop?tab and click the?Web Browser?application. Enter the PC-A IP address as the URL. The Packet Tracer 5.x welcome page from the web server should be displayed. Close the br