routers and firewall

carl_townshend · ‎09-20-2005

Can anyone tell me why someone would use 2 1700 routers, 1 acting as the router and 1 the firewall, why not do it all on one router, How would this be set up ?

paddyxdoyle · ‎09-20-2005

I would only use a single router to do both, this would be set up using CBAC on the router to inspect traffic in an outbound direction, NAT would be required if its for Internet traffic.

carl_townshend · ‎09-20-2005

what is CBAC ? why have they got 2 routers ?

paddyxdoyle · ‎09-20-2005

I'm guessing as they are using 1700's then this is a small site, If it was a large site then you would normally see a router connecting to the internet and then a firewall between the router and LAN. You can use the router as a buffer providing DOS protection, anti-spoofing and other stuff leaving your firewall to do your port filtering/application layer inpsection etc...

As for CBAC, its also known as IOS firewall. Try doing a search on this site, its all here...