zoukankan      html  css  js  c++  java
  • Cyber Security

    Multiple options to integrate the Palo Alto Firewall into your:

    • Network
    • Layer 2 interfaces and VLAN interfaces
    • Layer 3 interfaces
    • Tap interfaces
    • Loopback and tunnel interfaces
    • HA interfaces

    Type 1 - Layer 2 interfaces:

    • Allows a Trunk interface to transmit
    • Tagged VLAN's which can be assigned to VLAN interfaces
    • Can be allocated in port channels (link aggregation with LACP)

     

     Configure a Layer2 interface with Wired-VLAN20.

     Add a layer2 subinterface.

    Add a Wireless-VLAN30 subinterface.

    Type2 - Layer 3 interfaces:

    • Carries end-to-end Layer 3 traffic with an assigned IP address.
    • Can be allocated in port channels(link aggregation with LACP)
    • Can be sub-divided in L3 Subinterfaces.

    Add a layer3 interface.

     Type3 - Tunnel and loopback interfaces:

    • Used to logically assign attributes to tunnel entry/exit points
    • Loopbacks: Create always-on logical interfaces for required applications.

     

     Configure a tunnel.

     Confiture Loopback

     

     

     Configure Virtual Router

     Configure IPsec Tunnels here.

    Typer 4 - HA(High availability interfaces):

    • Allows connectively between two Palo Alto Firewalls to establish a highly available Firewall setup
    • HA links will carry required information to build the cluster, and sync routing/configuration across the members.

     Configure HA interface.

     Enable HA setup.

     Configure the Control Link.

     https://docs.paloaltonetworks.com/pan-os/7-1/pan-os-admin/high-availability/set-up-activepassive-ha/configure-activepassive-ha

    相信未来 - 该面对的绝不逃避,该执著的永不怨悔,该舍弃的不再留念,该珍惜的好好把握。
  • 相关阅读:
    springdataJpa对无主键表或视图查询的支持
    Blynk系列随笔
    arduino系列文章
    Debezium系列随笔
    Kafka系列随笔
    SSAS 收藏
    Saiku 系列
    Mondrian系列
    数据仓库理论学习
    加密解密
  • 原文地址:https://www.cnblogs.com/keepmoving1113/p/12483100.html
Copyright © 2011-2022 走看看