Bay Networks BayRS Guide de dépannage Page 26
- Page / 197
- Table des matières
- DEPANNAGE
- MARQUE LIVRES
Noté. / 5. Basé sur avis des utilisateurs
21
Chapter 3: Troubleshooting Network Address
Translation
In This Chapter:
Introduction ......................................................................................................................................................22
Resolving Common NAT Problems ...............................................................................................................22
Optimizing Network Performance with NAT...................................................................................................22
How to NAT (Network Address Translate) a DMZ host accessed by external hosts without applying the NAT
on the internal network...................................................................................................................................22
How to set up Hide Mode Address Translation behind a dynamic address...................................................23
How to use Encryption with NAT and ICMP...................................................................................................23
How to Connect several illegal IP networks through the Internet...................................................................23
Is there a limitation on XLATE_HIDE? ...........................................................................................................24
How to Configure SecuRemote with Split DNS for an Internal DNS Server..................................................24
How to use NAT when the IP address is embedded in the data area............................................................24
Does the ident service work with Hide NAT?.................................................................................................25
If the external IP address of the FireWall is an illegal address, can you connect to it via SecuRemote?......25
“Leaky” NAT ...................................................................................................................................................26
Cause..........................................................................................................................................................26
Troubleshooting ..........................................................................................................................................26
How to workaround this issue.....................................................................................................................26
1. Increase the TCP timeout value..........................................................................................................26
2. Increase TCP timeout for a specific service........................................................................................26
3. Increase the value out of the TCP start time out (tcpstarttimeout) parameter....................................26
4. Increase the value of the TCP end timeout (tcpendtimeout): .............................................................27
5. Change the relevant service to a service of type 'other' and not 'TCP':..............................................27
6. Applying the ACK Denial-Of-Service hotfix.........................................................................................27
Debugging NAT................................................................................................................................................28
More Information..............................................................................................................................................28
- VPN-1/FireWall-1 1
- Contents 2
- Table of Contents 3
- WhoshouldusethisGuide 6
- Feedback Please! 6
- Summary of Contents 7
- Troubleshooting Guidelines 8
- In This Chapter: 10
- Troubleshooting Tools 11
- UNIX only) 12
- Explanation 13
- offset of IP in 17
- FireWall-1 Monitor Command 21
- Examples 22
- Debugging with INSPECT 24
- Translation 26
- Resolving Common NAT Problems 27
- “Leaky” NAT 31
- Debugging NAT 33
- BayRS router 36
- Controlling the FireWall 37
- Licenses 38
- Problems and bugs 38
- BayRS Router Commands 39
- VPN-1/FireWall-1 Commands: 40
- General Commands 40
- General problems 41
- Common problems resolution 43
- Information to Gather 44
- Spoofing 49
- Debugging of Cisco Routers 49
- Debugging of 3Com Routers 51
- Debugging 52
- Troubleshooting Anti-Spoofing 54
- Static ARP and Anti-Spoofing 55
- Debugging Anti-Spoofing 56
- Content Security 57
- SMTP Security Server 58
- Debugging Security servers 58
- HTTP Security server 59
- IP Interface 60
- The Software 60
- VPN-1/FireWall-1 Rule Base 60
- Diagram of the environment 61
- Performance Test 62
- Discussion 63
- Action Plan 63
- Conclusions 64
- HTTP Security Server and DNS 66
- Test Plan 68
- The Solaris machines 69
- The VPN/FireWall module 69
- The security servers 69
- The CVP server 69
- Test Results 70
- FTP Security Server 71
- Fast mode and FTP 73
- FTP PASV vulnerability: 74
- PORT command is blocked 74
- Server fails 78
- Log Viewer Error Messages 80
- Log Viewer 81
- Security Server? 82
- Chapter 2: Security Servers 84
- Chapter 3: Content Security 84
- Troubleshooting LDAP Issues 87
- Installation Issues 88
- Configuration Issues 88
- Schema Checking 89
- Known configuration problems 90
- AMC Configuration problem 91
- Working with the AMC 92
- Creating a Tree Object 93
- Defining Users 93
- The LDAP server 93
- Working with LDAP 94
- Known LDAP and AMC problems 94
- Exporting Users Problems 95
- Special Configurations 96
- PKI Issues related to LDAP 96
- Known Limitations 97
- Debugging LDAP 98
- More Information 100
- Management 101
- What Tables are synchronized 104
- Synchronization Tests 104
- Troubleshooting Fail-over 106
- Problem Detection Devices 107
- Troubleshooting Fail-Over 108
- VPN Fail-Over 108
- Debugging High-Availability 111
- Load Balancing Components 112
- Stealth Rule 114
- Check_alive table 114
- Balance does not work 115
- Troubleshooting SNMP 120
- Node n Node 2 Node 1 123
- External Network 123
- Internal IP 124
- Bank Certificate Key (BCK) 125
- Product Features Lists 126
- How to Verify Licenses 127
- Licensing non IP hosts 128
- License installation 129
- In This Chapter 132
- Introduction 133
- Rule Base 133
- Network Address translation 133
- Anti Spoofing 133
- High Availability 135
- Security Servers 135
- BAY Router 136
- Open Security Extension (OSE) 137
- Mission Statement 139
- Telephone 139
- Problem Severity Definitions 142
- Software Versions Supported 142
- Escalation Procedure 142
- In This Appendix: 143
- What are State Tables? 146
- Table Attributes 147
- General tables 148
- SAMP tables 152
- License enforcement tables 153
- Logging tables 154
- NAT tables 156
- VPN tables 158
- SKIP tables 159
- NSID value Description 160
- IKE tables 161
- IPSec tables 161
- SPI_table table 162
- Load balancing tables 170
- Specific services tables 172
- RPC tables 174
- Program Number Description 175
- 100001 Rstat 175
- 100004 Ypserv 175
- 100007 Ypbind 175
- 100300 NIS+ 175
- DCE/RPC tables 176
- IIOP tables 177
- Static tables (lists) 177
- Object Lists tables 178
- Time Objects tables 180
Produits connexes et manuels pour Logiciel Bay Networks BayRS
(76 pages)
Logiciel Bay Networks 5391 Guide d'installation
(138 pages)
(138 pages)
Logiciel Bay Networks 5000 Manuel de service
(166 pages)
(166 pages)
Logiciel Bay Networks 5391 Manuel de service
(20 pages)
(20 pages)
Logiciel Bay Networks 5000 Spécifications
(185 pages)
(185 pages)
© 2020, manymanuals.fr. Tous droits réservés | 0.023 s |
Manymanuals.com
Manymanuals.de
Manymanuals.fr
Manymanuals.it
Manymanuals.pl
Manymanuals.cz
Manymanuals.es
Manymanuals-pt.com
Commentaires sur ces manuels