Cisco PIX 525 Spécifications télécharger pdf (Page 172)

4-20

Cisco PIX Firewall and VPN Configuration Guide

78-15033-01

Chapter 4 Using PIX Firewall in SOHO Networks

Using the PIX Firewall DCHP Server

crypto map mymap interface outside

sysopt connection permit-ipsec

nat (inside) 0 access-list ipsec-peer

isakmp policy 10 authentication preshare

isakmp policy 10 encryption des

isakmp policy 10 hash sha

isakmp policy 10 group 1

isakmp policy 10 lifetime 3600

isakmp key 12345678 address 0.0.0.0 netmask 0.0.0.0

isakmp enable outside

!configure dhcp server pool of addresses

dhcpd address 172.17.1.100-172.17.1.109 inside

dhcpd dns 192.168.0.20

dhcpd wins 192.168.0.10

dhcpd lease 3000

dhcpd domain example.com

! enable dhcp server on inside interface

dhcpd enable inside

! use outside interface ip as PAT global address

nat (inside) 1 0 0

global (outside) 1 interface

Using Cisco IP Phones with a DHCP Server

Enterprises with small branch offices implementing a Cisco IP Telephony VoIP solution typically

implement Cisco

CallManager at a central office to control Cisco IP Phones at small branch offices. This

implementation allows centralized call processing, reduces the equipment required, and eliminates the

administration of additional Cisco

CallManager and other servers at branch offices.

Cisco IP Phones download their configuration from a TFTP server. When a Cisco IP Phone starts, if it

does not have both the IP address and TFTP server IP address preconfigured, it sends a request with

option 150 or 66 to the DHCP server to obtain this information.

• DHCP option 150 provides the IP addresses of a list of TFTP servers

• DHCP option 66, defined in RFC 2132 (DHCP Options and BOOTP Vendor Extensions), gives the

IP address or the host name of a single TFTP server.

Cisco IP Phones may include both option 150 and 66 in a single request. In this case, the PIX Firewall

DHCP server provides values for both options in the response if they are configured on the PIX

Firewall.

Cisco IP Phones may also include DHCP option 3 in their requests. PIX Firewall Version 6.0(1) added

support for this option, which lists the IP addresses of default routers.

PIX Firewall Version 6.2 and higher provides the following options for the dhcpd command:

dhcpd option 66 ascii server_name

dhcpd option 150 ip server_ip1 [server_ip2]

When using option 66, replace server_name with the TFTP host name. A single TFTP server can be

identified using option 66.

When using option 150, replace server_ip1 with the IP address of the primary TFTP server and replace

server_ip2 with the IP address of the secondary TFTP server.

A maximum of two TFTP servers can be

identified using option 150.

To disable option 66 or option 150, enter one of the following commands:

no dhcpd option 66

no dhcpd option 150

1 2 ... 167 168 169 170 171 172 173 174 175 176 177 ... 465 466

Commentaires sur ces manuels

Pas de commentaire

Cisco PIX 525 Spécifications Page 172

Commentaires sur ces manuels

Produits connexes et manuels pour Systèmes de contrôle d'accès de sécurité Cisco PIX 525