Scribd
Upload
5 views4 pages

Firewall Configuration for HQ, DC, and BR

The document contains configuration settings for three firewalls: HQ-FW, DC-FW, and BR-FW. Each firewall is configured with specific interfaces, IP addresses, DNS settings, static routes, and firewall policies to manage traffic between LAN and WAN. The configurations ensure secure access and proper routing for network traffic across different segments.

Uploaded by

Wilfried Junior Njia Ndzebe
Copyright
© All Rights Reserved
We take content rights seriously. If you suspect this is your content, claim it here.
Available Formats
Download as TXT, PDF, TXT or read online on Scribd
5 views4 pages

Firewall Configuration for HQ, DC, and BR

The document contains configuration settings for three firewalls: HQ-FW, DC-FW, and BR-FW. Each firewall is configured with specific interfaces, IP addresses, DNS settings, static routes, and firewall policies to manage traffic between LAN and WAN. The configurations ensure secure access and proper routing for network traffic across different segments.

Uploaded by

Wilfried Junior Njia Ndzebe
Copyright
© All Rights Reserved
We take content rights seriously. If you suspect this is your content, claim it here.
Available Formats
Download as TXT, PDF, TXT or read online on Scribd

config system global

set hostname HQ-FW


set admintimeout 480
end

config system interface


edit port5
set alias MGMT
set mode static
set ip [Link] [Link]
set allowaccess ping https ssh http
end

config system interface


edit port1
set alias WAN-1
set mode static
set ip [Link] [Link]
set allowaccess ping
set role wan
end

config system interface


edit port2
set alias WAN-2
set mode static
set ip [Link] [Link]
set allowaccess ping
set role wan
end

config system interface


edit port3
set alias LAN
set mode static
set ip [Link] [Link]
set allowaccess ping fgfm
set role lan
end

config system dns


set primary [Link]
set secondary [Link]
end

config router static


edit 1
set dst [Link] [Link]
set device port1
set gateway [Link]
next
edit 2
set dst [Link] [Link]
set device port2
set gateway [Link]
next
end
config firewall policy
edit 1
set name LAN-to-WAN1
set srcintf port3
set dstintf port1
set srcaddr all
set dstaddr all
set action accept
set schedule always
set service ALL
set logtraffic all
set nat enable
set status enable
next
end

config firewall policy


edit 2
set name LAN-to-WAN2
set srcintf port3
set dstintf port2
set srcaddr all
set dstaddr all
set action accept
set schedule always
set service ALL
set logtraffic all
set nat enable
set status enable
next
end

--------------------------------------------------------
DC-FW
=======================================================
config system global
set hostname DC-FW
set admintimeout 480
end

config system interface


edit port5
set alias MGMT
set mode static
set ip [Link] [Link]
set allowaccess ping https ssh http
end

config system interface


edit port1
set alias WAN-1
set mode static
set ip [Link] [Link]
set allowaccess ping fgfm
set role wan
end

config system interface


edit port2
set alias WAN-2
set mode static
set ip [Link] [Link]
set allowaccess ping
set role wan
end

config system interface


edit port3
set alias LAN
set mode static
set ip [Link] [Link]
set allowaccess ping
set role lan
end

config system dns


set primary [Link]
set secondary [Link]
end

config router static


edit 1
set dst [Link] [Link]
set device port1
set gateway [Link]
next
edit 2
set dst [Link] [Link]
set device port2
set gateway [Link]
next
end

config firewall policy


edit 1
set name LAN-to-WAN
set srcintf port3
set dstintf port1 port2
set srcaddr all
set dstaddr all
set action accept
set schedule always
set service ALL
set logtraffic all
set nat enable
set status enable
next
end
----------------------------------------------------------
BR-FW
==========================================================
config system global
set hostname BR-FW
set admintimeout 480
end

config system interface


edit port5
set alias MGMT
set mode static
set ip [Link] [Link]
set allowaccess ping https ssh http
end

config system interface


edit port1
set alias WAN-1
set mode static
set ip [Link] [Link]
set allowaccess ping fgfm
set role wan
end

config system interface


edit port2
set alias LAN
set mode static
set ip [Link] [Link]
set allowaccess ping
set role lan
end

config system dns


set primary [Link]
set secondary [Link]
end

config router static


edit 1
set dst [Link] [Link]
set device port1
set gateway [Link]
end

config firewall policy


edit 1
set name LAN-to-WAN
set srcintf port2
set dstintf port1
set srcaddr all
set dstaddr all
set action accept
set schedule always
set service ALL
set logtraffic all
set nat enable
set status enable
next
end
==================================================

You might also like