Routing Mode

This Lite version of SunScreen 3.1 only operates in routing mode (where the Screen performs routing as well as firewall functions).

Typically, you operate the Screen in routing mode if you need a machine to act both as a router and a firewall. In this mode, you need at least two exposed IP interfaces, and a hop visible to traceroute and other network utilities.

Be aware of the following considerations when operating in routing mode:

• The existing Solaris machine must be acting as a router. The Screen uses the Solaris operating environment to provide IP routing.

• The Screen makes use of the Solaris IP stack on the filtering interfaces, so it does not possess stealth characteristics.

• You must divide up different networks as you would with any router.

• The addition of a SunScreen 3.1 Lite to your network can require re-numbering IP addresses on your hosts (if you did not already have a router where your SunScreen is being placed).