Information Technology

Dec 16 Wed 2015 10:32
Paloalto基本設定

基本中的基本...以免連上網都沒辦法._."

1.      用MGT port登入,預設IP:192.168.1.1 預設帳密: admin//admin
2.      Network－Virtual Wires－移除預設值
3.      Network－Zones－新增兩個Zones “L3－WAN” “L3－LAN”
4.      Network－Interfaces－選擇Wan(Untrust)介面: ex: ethernet1/2
設定Interface Type為Layer3
設定Virual Route為default
設定Security Zone為L3－WAN
paloalto.01
設定WAN的固定IP
paloalto.02
設定Management Profile (該介面允許的功能)
paloalto.03
5.      同理,新增LAN Port,設定的IP即為連到Paloalto的LAN－IP

6.      Network－Virtual Routes－Default
   paloalto.04
Destination為0.0.0.0/0
Interface為WAN Port
Next Hop為WAN端Gateway
   paloalto.05
7.      Network－DHCP

   paloalto.06

8.      Policies－Security－刪除預設policy
Add－General－Name
－Source－Source Zone－L3 Lan
－Destination－Destination Zone－L3 WAN
－Actions－Action Setting－Allow
paloalto.07
9.      Policies-NAT
Add-General-Name
-Original Packet
paloalto.08
-Translated Packet