ccna 4 pdf download

ccna 4 pdf download.4.3.4.2 Configuring Firewall InterfacesThe first task in enabling advanced firewall configuration is to define the internal and external interfaces. The external interface is usually a router interface connected to the Internet or WAN. Internal interfaces are usually physical or logical interfaces connected to the LAN. Multiple internal and external interfaces can also be selected.Step 1 In the AdvancedFirewallInterfaceConfiguration window, use the outside (unstrusted) check box to select an external interface. Use the inside (trusted) check box to identify each of the internal interfaces. The external interface is connected to a corporate WAN or to an Intemeto the internal interface is connected to the LAN. these interfaces are associated with one of the two default zones (external and internal) created by the CCP. Multiple interfaces can be selected for each zone.Step 2 If a DMZ is necessary, you can use the DMZInterface drop-down list box to select an interface to connect to the DMZ.Step 3 (Optional) Check the AllowsecureCiscoCP access from outside interfaces check box if you intend to allow users outside the firewall to access the router through CCP. When this option is checked, secure HTTP access to the outside interfaces is allowed. Since this is a secure CCP connection going to the firewall, it is also not possible to browse the external interface via HTTP after you have finished the configuration using the Firewall Wizard. Click NextoStep 4 If the Allow secure Cisco CP access from the outside interfaces check box is checked, the ConfiguringFirewallfor RemoteAccess window appears. Specify the source host or network through which CCP can be allowed to remotely manage the router. Select Network addressHost IP address or any from the Type drop-down list, then fill in the IP address and the appropriate subnet source code fields. The firewall can be modified to allow access to the specified address.If the Allow secure Cisco CP access from outsiddinterfaces check box is not checked, a warning message will appear informing you that after the configuration is complete, access to the CCP will no longer be allowed through the external interface. click OK.4.3.4.3 Configuring Security LevelsAfter the interface has been configured, the Basic Firewall Security Configuration window appears. Use the sliders to view the descriptions provided for each level of security, and then select the desired security level. The security levels include Low, Medium, and High. Note: This option is not available when using the Basic Firewall Wizard. Once you have selected the appropriate security level, click Click. in the AdvancedFirewallSecurityConfiguration window, click the Preview Commands button to view the CiscoIOS commands that make up the selected policy. The router must be configured with at least one DNS server IP address for application security to take effect.4.3.4.4 Distribution Configuration