{"id":7923,"date":"2023-09-25T08:50:53","date_gmt":"2023-09-25T01:50:53","guid":{"rendered":"https:\/\/vacif.com\/?p=7923"},"modified":"2024-06-24T04:02:14","modified_gmt":"2024-06-24T04:02:14","slug":"firewall-forcepoint-cau-hinh-cho-phep-lan-ra-internet-qua-sd-wan","status":"publish","type":"post","link":"https:\/\/vacif.com\/en\/firewall-forcepoint-cau-hinh-cho-phep-lan-ra-internet-qua-sd-wan\/","title":{"rendered":"FIREWALL FORCEPOINT : C\u1ea4U H\u00ccNH CHO PH\u00c9P LAN RA INTERNET QUA SD-WAN"},"content":{"rendered":"\n

S\u01a1 \u0111\u1ed3 :<\/strong><\/p>\n\n\n

\n
\"\"<\/figure>\n<\/div>\n\n\n

I. C\u1ea5u h\u00ecnh SD-WAN<\/strong><\/p>\n\n\n\n

1. C\u1ea5u h\u00ecnh IP cho t\u1eebng port<\/strong><\/p>\n\n\n\n

B\u00e0i tr\u01b0\u1edbc m\u00ecnh \u0111\u00e3 h\u01b0\u1edbng d\u1eabn c\u1ea5u h\u00ecnh IP LAN v\u00e0 WAN<\/p>\n\n\n\n

C\u00e1c b\u1ea1n tham kh\u1ea3o t\u1ea1i \u0111\u00e2y : <\/p>\n\n\n\n

\nhttp:\/\/aws.vacif.com\/blog\/firewall-forcepoint-cach-cau-hinh-ip-tren-thiet-bi-forcepoint-bao-gom-cong-wan-static-va-cong-wan-quay-so-pppoe-ip-static-ip-dynamic\/\n<\/div><\/figure>\n\n\n
\n
\"\"<\/figure>\n<\/div>\n\n\n

2. C\u1ea5u h\u00ecnh SD-WAN cho Forcepoint<\/strong><\/p>\n\n\n\n

2.1 C\u1ea5u h\u00ecnh netlink cho SD-WAN<\/strong><\/p>\n\n\n\n

T\u1ea1i giao di\u1ec7n qu\u1ea3n l\u00fd -> Tab Configuration<\/strong> -> Configuration<\/strong> -> SD-WAN <\/strong>-> Traffic Handlers<\/strong><\/p>\n\n\n\n

T\u1ea1i \u0111\u00e2y c\u00e1c b\u1ea1n th\u1ea5y dynamic-netlink-FPT \u0111\u00e3 \u0111\u01b0\u1ee3c t\u1ea1o ( m\u00ecnh \u0111\u00e3 \u0111\u1ed5i t\u00ean th\u00e0nh FPT-Port1 ) do ta c\u1ea5u h\u00ecnh PPPoE d\u1ea1ng IP Dynamic<\/p>\n\n\n

\n
\"\"<\/figure>\n<\/div>\n\n\n

\u0110\u1ed1i v\u1edbi Port4 WAN Static ch\u01b0a c\u00f3 n\u00ean ta t\u1ea1o th\u1ee7 c\u00f4ng<\/p>\n\n\n\n

Ta chu\u1ed9t ph\u1ea3i v\u00e0o kho\u1ea3ng tr\u1ed1ng ch\u1ecdn Static Netlink<\/strong><\/p>\n\n\n

\n
\"\"<\/figure>\n<\/div>\n\n\n

Tab General<\/strong><\/p>\n\n\n\n

Name :<\/strong> nh\u1eadp t\u00ean t\u00f9y ch\u1ecdn<\/p>\n\n\n\n

Gateway : <\/strong>l\u00e0 gateway IP WAN m\u00e0 ta \u0111\u00e3 t\u1ea1o ( b\u00e0i tr\u01b0\u1edbc )<\/p>\n\n\n\n

Network : <\/strong>ch\u1ecdn subnet chung l\u1edbp v\u1edbi gateway<\/p>\n\n\n\n

Nh\u1ea5n OK<\/strong> \u0111\u1ec3 t\u1ea1o<\/p>\n\n\n

\n
\"\"<\/figure>\n<\/div>\n\n\n

<\/p>\n\n\n

\n
\"\"<\/figure>\n<\/div>\n\n\n

Quay l\u1ea1i Tab Home <\/strong>Forcepoint<\/p>\n\n\n\n

Edit ( icon c\u00e2y vi\u1ebft ) Vacif-ngfw-01<\/strong><\/p>\n\n\n

\n
\"\"<\/figure>\n<\/div>\n\n\n

T\u1ea1i Routing<\/strong> -> ch\u1ecdn Add Static Netlink<\/strong><\/p>\n\n\n

\n
\"\"<\/figure>\n<\/div>\n\n\n

Ta ti\u1ebfn h\u00e0nh Add VT-Port4<\/strong> ( \u0111\u00e3 t\u1ea1o \u1edf b\u01b0\u1edbc tr\u00ean)<\/p>\n\n\n\n

Nh\u1ea5n OK <\/strong>\u0111\u1ec3 t\u1ea1o<\/p>\n\n\n

\n
\"\"<\/figure>\n<\/div>\n\n\n

<\/p>\n\n\n

\n
\"\"<\/figure>\n<\/div>\n\n\n

Quay tr\u1edf l\u1ea1i Traffic-Handlers<\/strong><\/p>\n\n\n\n

Chu\u1ed9t ph\u1ea3i -> Outbound Multilink<\/strong><\/p>\n\n\n

\n
\"\"<\/figure>\n<\/div>\n\n\n

Tab General<\/strong><\/p>\n\n\n\n

Name :<\/strong> \u0111\u1eb7t t\u00ean b\u1ea1n mu\u1ed1n<\/p>\n\n\n\n

Nh\u1ea5n Add<\/strong><\/p>\n\n\n\n

    \n
  • Ta ti\u1ebfn h\u00e0nh Add t\u1eebng Link 2 WAN m\u00e0 ta \u0111\u00e3 t\u1ea1o<\/li>\n<\/ul>\n\n\n
    \n
    \"\"<\/figure>\n<\/div>\n\n
    \n
    \"\"<\/figure>\n<\/div>\n\n\n

    Nh\u1ea5n OK <\/strong>\u0111\u1ec3 t\u1ea1o<\/p>\n\n\n

    \n
    \"\"<\/figure>\n<\/div>\n\n\n

    2.2 T\u1ea1o rule v\u00e0 NAT rule <\/strong><\/p>\n\n\n\n

    T\u1ea1i tab Home<\/strong><\/p>\n\n\n\n

    Nh\u1ea5n v\u00e0o Edit<\/strong> (icon c\u00e2y b\u00fat) t\u1ea1i Policy : VACIF<\/strong><\/p>\n\n\n

    \n
    \"\"<\/figure>\n<\/div>\n\n\n

    C\u00e1c b\u1ea1n ch\u1ecdn nh\u01b0 h\u00ecnh<\/p>\n\n\n

    \n
    \"\"<\/figure>\n<\/div>\n\n\n

    Chuy\u1ec3n qua Tab IPv4 NAT<\/strong><\/p>\n\n\n\n

    T\u1ea1i c\u1ed9t NAT<\/strong><\/p>\n\n\n\n

    Ta click <\/strong>v\u00e0o<\/p>\n\n\n\n

    T\u1ea1i tab Source Translation<\/strong><\/p>\n\n\n\n

    Translation Type<\/strong> : ch\u1ecdn Dynamic<\/strong><\/p>\n\n\n\n

    Nh\u1ea5n v\u00e0o Select<\/strong><\/p>\n\n\n

    \n
    \"\"<\/figure>\n<\/div>\n\n\n

    Ch\u1ecdn Traffic Handlers<\/strong><\/p>\n\n\n

    \n
    \"\"<\/figure>\n<\/div>\n\n\n

    Ch\u1ecdn SD-WAN4<\/strong> ta m\u1edbi t\u1ea1o<\/p>\n\n\n

    \n
    \"\"<\/figure>\n<\/div>\n\n\n

    Nh\u1ea5n OK<\/strong> \u0111\u1ec3 t\u1ea1o<\/p>\n\n\n

    \n
    \"\"<\/figure>\n<\/div>\n\n\n

    Ti\u1ebfn h\u00e0nh c\u1ea5u h\u00ecnh rule NAT<\/strong> nh\u01b0 h\u00ecnh<\/p>\n\n\n

    \n
    \"\"<\/figure>\n<\/div>\n\n\n

    Quan tr\u1ecdng : khi c\u1ea5u h\u00ecnh b\u1ea5t c\u1ee9 g\u00ec trong Forcepoint \u0111\u1ec3 nh\u1eefng c\u1ea5u h\u00ecnh \u0111\u00f3 ho\u1ea1t \u0111\u1ed9ng ta ph\u1ea3i nh\u1ea5n v\u00e0o save run n\u00e0y \u0111\u1ec3 th\u1ef1c thi c\u1ea5u h\u00ecnh <\/p>\n\n\n\n

    \"\"<\/figure>\n\n\n\n

    K\u1ebft qu\u1ea3 : M\u00e1y t\u00ednh trong v\u00f9ng LAN ra internet<\/p>\n\n\n

    \n
    \"\"<\/figure>\n<\/div>","protected":false},"excerpt":{"rendered":"

    S\u01a1 \u0111\u1ed3 : I. C\u1ea5u h\u00ecnh SD-WAN 1. C\u1ea5u h\u00ecnh IP cho t\u1eebng port B\u00e0i tr\u01b0\u1edbc m\u00ecnh \u0111\u00e3 h\u01b0\u1edbng d\u1eabn c\u1ea5u h\u00ecnh IP LAN v\u00e0 WAN C\u00e1c b\u1ea1n tham kh\u1ea3o t\u1ea1i \u0111\u00e2y : 2. C\u1ea5u h\u00ecnh SD-WAN cho Forcepoint 2.1 C\u1ea5u h\u00ecnh netlink cho SD-WAN T\u1ea1i giao di\u1ec7n qu\u1ea3n l\u00fd -> Tab Configuration -> Configuration […]<\/p>\n","protected":false},"author":11,"featured_media":8009,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"_eb_attr":"","ocean_post_layout":"","ocean_both_sidebars_style":"","ocean_both_sidebars_content_width":0,"ocean_both_sidebars_sidebars_width":0,"ocean_sidebar":"","ocean_second_sidebar":"","ocean_disable_margins":"enable","ocean_add_body_class":"","ocean_shortcode_before_top_bar":"","ocean_shortcode_after_top_bar":"","ocean_shortcode_before_header":"","ocean_shortcode_after_header":"","ocean_has_shortcode":"","ocean_shortcode_after_title":"","ocean_shortcode_before_footer_widgets":"","ocean_shortcode_after_footer_widgets":"","ocean_shortcode_before_footer_bottom":"","ocean_shortcode_after_footer_bottom":"","ocean_display_top_bar":"default","ocean_display_header":"default","ocean_header_style":"","ocean_center_header_left_menu":"","ocean_custom_header_template":"","ocean_custom_logo":0,"ocean_custom_retina_logo":0,"ocean_custom_logo_max_width":0,"ocean_custom_logo_tablet_max_width":0,"ocean_custom_logo_mobile_max_width":0,"ocean_custom_logo_max_height":0,"ocean_custom_logo_tablet_max_height":0,"ocean_custom_logo_mobile_max_height":0,"ocean_header_custom_menu":"","ocean_menu_typo_font_family":"","ocean_menu_typo_font_subset":"","ocean_menu_typo_font_size":0,"ocean_menu_typo_font_size_tablet":0,"ocean_menu_typo_font_size_mobile":0,"ocean_menu_typo_font_size_unit":"px","ocean_menu_typo_font_weight":"","ocean_menu_typo_font_weight_tablet":"","ocean_menu_typo_font_weight_mobile":"","ocean_menu_typo_transform":"","ocean_menu_typo_transform_tablet":"","ocean_menu_typo_transform_mobile":"","ocean_menu_typo_line_height":0,"ocean_menu_typo_line_height_tablet":0,"ocean_menu_typo_line_height_mobile":0,"ocean_menu_typo_line_height_unit":"","ocean_menu_typo_spacing":0,"ocean_menu_typo_spacing_tablet":0,"ocean_menu_typo_spacing_mobile":0,"ocean_menu_typo_spacing_unit":"","ocean_menu_link_color":"","ocean_menu_link_color_hover":"","ocean_menu_link_color_active":"","ocean_menu_link_background":"","ocean_menu_link_hover_background":"","ocean_menu_link_active_background":"","ocean_menu_social_links_bg":"","ocean_menu_social_hover_links_bg":"","ocean_menu_social_links_color":"","ocean_menu_social_hover_links_color":"","ocean_disable_title":"default","ocean_disable_heading":"default","ocean_post_title":"","ocean_post_subheading":"","ocean_post_title_style":"","ocean_post_title_background_color":"","ocean_post_title_background":0,"ocean_post_title_bg_image_position":"","ocean_post_title_bg_image_attachment":"","ocean_post_title_bg_image_repeat":"","ocean_post_title_bg_image_size":"","ocean_post_title_height":0,"ocean_post_title_bg_overlay":0.5,"ocean_post_title_bg_overlay_color":"","ocean_disable_breadcrumbs":"default","ocean_breadcrumbs_color":"","ocean_breadcrumbs_separator_color":"","ocean_breadcrumbs_links_color":"","ocean_breadcrumbs_links_hover_color":"","ocean_display_footer_widgets":"default","ocean_display_footer_bottom":"default","ocean_custom_footer_template":"","ocean_post_oembed":"","ocean_post_self_hosted_media":"","ocean_post_video_embed":"","ocean_link_format":"","ocean_link_format_target":"self","ocean_quote_format":"","ocean_quote_format_link":"post","ocean_gallery_link_images":"on","ocean_gallery_id":[],"footnotes":""},"categories":[80],"tags":[289,290,291,292],"class_list":["post-7923","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-huong-dan-tai-lieu","tag-forcepoint","tag-forcepoint-outbound-multilink","tag-internet","tag-sd-wan","entry","has-media"],"_links":{"self":[{"href":"https:\/\/vacif.com\/en\/wp-json\/wp\/v2\/posts\/7923","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/vacif.com\/en\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/vacif.com\/en\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/vacif.com\/en\/wp-json\/wp\/v2\/users\/11"}],"replies":[{"embeddable":true,"href":"https:\/\/vacif.com\/en\/wp-json\/wp\/v2\/comments?post=7923"}],"version-history":[{"count":1,"href":"https:\/\/vacif.com\/en\/wp-json\/wp\/v2\/posts\/7923\/revisions"}],"predecessor-version":[{"id":10124,"href":"https:\/\/vacif.com\/en\/wp-json\/wp\/v2\/posts\/7923\/revisions\/10124"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/vacif.com\/en\/wp-json\/wp\/v2\/media\/8009"}],"wp:attachment":[{"href":"https:\/\/vacif.com\/en\/wp-json\/wp\/v2\/media?parent=7923"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/vacif.com\/en\/wp-json\/wp\/v2\/categories?post=7923"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/vacif.com\/en\/wp-json\/wp\/v2\/tags?post=7923"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}