pix防火墙特点与应用（Characteristics and application of PIX Firewall）.doc

pix防火墙特点与应用（Characteristics and application of PIX Firewall） Characteristics and application of PIX firewall I. understanding of the PIX firewall PIX is the hardware firewall of Cisco, and the hardware firewall has the characteristics of fast working speed and convenient operation. PIX has many models, and concurrent connections are important parameters of the PIX firewall. PIX25 is a typical device. PIX firewall common interfaces are: console, Failover, Ethernet, USB. Network region: Internal network: inside External network: outside Middle area: DMZ (ceasefire zone). Place an open server. Two, firewall configuration rules No connection status (no handshake or handshake, unsuccessful or illegal packets), and no packets can go through the firewall. (internally initiated connections can be returned to the package. Open servers allow external initiated connections via ACL Inside can access any outside and DMZ regions. DMZ can access the outside region. Inside access to DMZ requires coordination with static (static address translation). Outside access to DMZ requires coordination with ACL (access control list). Three, PIX firewall configuration mode: The configuration pattern of PIX firewall is similar to that of router. There are 4 management modes: PIXfirewall: user mode PIXfirewall#: privileged mode PIXfirewall (config) #: configuration mode Monitor:ROM monitor mode, boot, hold down the [Esc] key, or send a Break character to enter the monitor mode. Four, PIX basic configuration commands Commonly used commands are: nameIf, interface, IP, address, NAT, global, route, static, and so on. 1, nameIf Sets the interface name and specifies the security level. The security level ranges from 1~100. The greater the number, the higher the security level. For example, ask for settings: Ethernet0 is named the external interface outside, and the security level is 0. Ethernet1 is named the internal interface inside, and the security level is 100. Ethernet2 is named the intermediate