User's Manual

Networking
Configuring the Routing
Cisco ISA500 Series Integrated Security Appliance Administrator Guide 134
4
• Port Passive: Determines how the security appliance receives RIP packets.
Check this box to enable this feature on the interface or VLAN.
• Authentication: If you are using RIPv2, click Edit to specify the
authentication method for the interface or VLAN.
- None: Choose this option to invalidate the authentication.
- Simple Password Authentication: Choose this option to validate the
simple password authentication. Enter the password in the field.
- MD5 Authentication: Choose this option to validate the MD5
authentication. Enter the unique key ID in the MD5 Key ID field and the
Key in the MD5 Auth Key field.
STEP 4 Click Save to apply your settings.
Configuring Policy-based Routing Settings
Policy-based Routing (PBR) allows users to specify the internal IP and/or service
going through a specified WAN port to provide more flexbile and granular traffic
handling capabilities.
This feature can be used to segregate traffic between links that are not of the
same speed. High volume traffic can be routed through the port connected to a
high speed link and low volume traffic can be routed through the port connected
to the slow link.
For example, although HTTP traffics is typically routed through WAN1, by using
PBR you can bind the HTTP protocol to WAN1 and bind the FTP protocol to WAN2.
In this case, the security appliance automatically channels FTP data through
WAN2.
NOTE Make sure that you configure a secondary WAN connection and that the WAN
redundancy is set to the Load Balancing or Routing Table mode before you
configure the policy-based routing settings. See Configuring the Secondary
WAN, page 104 and Configuring the WAN Redundancy, page 112.
NOTE The security appliance supports up to 100 PBR rules.