Beruflich Dokumente
Kultur Dokumente
• nameif
• interface
• ip address
• nat
• global
• route
pixfirewall(config)#
nameif hardware_id if_name security_level
• Assigns a name to each perimeter interface on the
PIX Firewall and specifies its security level.
pixfirewall(config)#
pixfirewall(config)#
ip address outside dhcp [setroute] [retry
retry_cnt]
• Enables the DHCP client feature on the outside interface.
pixfirewall(config)#
nat [(if_name)] nat_id address
[netmask][timeout hh:mm:ss]
• Enables IP address translation.
pixfirewall(config)#
pixfirewall(config)#
route if_name ip_address netmask
gateway_ip [metric]
• Defines a static or default route for an
interface.
Client
Server
1. DHCPDISCOVER—The
client seeks an address
2. DHCPOFFER—The
server offers 10.0.0.3
3. DHCPREQUEST—The
client requests 10.0.0.3
4. DHCPACK—The server
acknowledges the
assignment of 10.0.0.3
pixfirewall(config)#
pixfirewall(config)#
dhcpd dns dns1 [dns2]
• Specifies the IP address of the DNS server the client
will use (optional)
pixfirewall(config)#
dhcpd wins wins1 [wins2]
• Specifies the IP address of the WINS server that the client will use (optional)
pixfirewall(config)#
pixfirewall(config)#
dhcpd option 150 ip server_ip1 [server_ip2]
• Enables the PIX Firewall to distribute the IP addresses of a list of
TFTP servers for IP Phone connections
pixfirewall(config)#
dhcpd lease lease_length
• Specifies the lease length to grant the client
• Default = 3,600 seconds
pixfirewall(config)#
dhcpd ping_timeout timeout
• Specifies the length of time the DHCP server waits before
allocating an address to a client.
• Default = 750 milliseconds
pixfirewall(config)#
dhcpd domain domain_name
• Specifies the domain name the client will use (optional)
pixfirewall(config)#
dhcpd enable [if_name]
• Enables the DHCP daemon within the PIX Firewall to
listen for DHCP client requests on the enabled
interface
pixfirewall(config)#
debug dhcpd event | packet
• Displays information associated with the DHCP server
pixfirewall(config)#
clear dhcpd
• Removes all dhcpd command
statements from the
configuration