Re: Router vs Firewall

From: Walter Roberson (roberson_at_ibd.nrc-cnrc.gc.ca)
Date: 11/03/05

  • Next message: Froggie the Gremlin: "Re: Sygate 5.6 problem" 
    Date: Thu, 3 Nov 2005 21:42:44 +0000 (UTC)

    In article <1131052506.905959.297200@z14g2000cwz.googlegroups.com>,
    timbrigham@gmail.com <timbrigham@gmail.com> wrote:
    :Quick question:
    :Can a router be told not to route from specific subnets to other
    :subnets, or is that a firewall only thing?
    :EG:
    :192.168.30.x -> 192.168.100.x allowed
    :192.168.30.x -> 192.168.101.x not allowed

    It depends on the router. Cisco's term for this would be
    Policy Based Routing (PBR). It would look something like (approximately)

    access-list 101 permit 192.168.30.0 0.0.0.255 192.168.101.0 0.0.0.255

    route-map RestrictMap 10 match address 101
    route-map RestrictMap 10 set interface Null0

    That is, you would take the flows you do not want, and send them
    to the bit bucket. 

    -- 
  If you lie to the compiler, it will get its revenge. -- Eric Sosman
  • Next message: Froggie the Gremlin: "Re: Sygate 5.6 problem"

    Relevant Pages

    • Re: newsgroup security?
      ... > the first weakness to address if one already has a firewall. ... move myself around in their subnets to get on a segment that had better ... NAT, ... I used a router with NAT and never had ...
      (comp.security.misc)
    • Can Cisco Pix be used as a router and a firewall?
      ... I am after a hardware filewall and a router and was wondering if I ... subnets or vlans and to also be a firewall between those 2 subnets or ... firewall should preferably allow for VPN tunneling. ...
      (comp.security.firewalls)
    • Can Cisco Pix be used as a router and a firewall?
      ... I am after a hardware filewall and a router and was wondering if I ... subnets or vlans and to also be a firewall between those 2 subnets or ... firewall should preferably allow for VPN tunneling. ...
      (comp.security.firewalls)
    • Router vs Firewall
      ... Can a router be told not to route from specific subnets to other ... or is that a firewall only thing? ...
      (comp.security.firewalls)
    • Re: DHCP and routing across subnets
      ... > You cannot fix this problem by changing things in DHCP or on the RRAS ... > (ie the router option in DHCP should be to the DSL router). ... > subnets access to the Internet. ... > static route to each DSL router to redirect the local traffic to the RRAS ...
      (microsoft.public.windows.server.networking)