Cisco ASR 1000 Series User Manual

Page 24 of 72
TOE-common-criteria(config-if)#interface g0/0
TOE-common-criteria(config-if)#ip address 11.1.1.6 255.255.255.0
TOE-common-criteria(config-if)#crypto map sample
TOE-common-criteria(config-if)#exit
TOE-common-criteria(config)#ip route 12.1.1.0 255.255.255.0 11.1.1.4
TOE-common-criteria(config)#access-list 115 permit ip 10.1.1.0 0.0.0.255 12.1.1.0
0.0.0.255 log
TOE-common-criteria(config)#logging host 12.1.1.1
3.3.5 Base Firewall Rule set Configuration
The Network Device PP VPN Gateway Extended Package (VPNGW EP) contains requirements
for the TOE basic packet filtering. Packet filtering is able to be done on many protocols by the
TOE, including but not limited to:
o IPv4 (RFC 791)
o IPv6 (RFC 2460)
o TCP (RFC 793)
o UDP (RFC 768)
o IKEv1 (RFCs 2407, 2408, 2409, RFC 4109)
o IKEv2 (RFC 5996)
o IPsec ESP (RFCs 4301, 4303)
o SSH (RFCs 4251, 4252, 4253, and 4254)
The following attributes, at a minimum, are configurable within Packet filtering rules for the
associated protocols:
 IPv4
o Source address
o Destination Address
o Protocol
 IPv6
o Source address
o Destination Address
o Next Header (Protocol)
 TCP
o Source Port
o Destination Port
 UDP
o Source Port

Cisco ASR 1000 Series Specifications

General

Brand	Cisco
Model	ASR 1000 Series
Category	Network Router
Language	English