kyle13311
1 post

Hi, i'd be very interested in a cheat sheet that shows how to configure the zone based firewall. I already read a few manuals but they are all really big and do not show any examples. Is anything like this planned ? Thanks for the other cheat sheets. They are really great.

Best regards

Nico

caste381
12 posts

Hi. I too think that a cheat sheet would be a good idea. Anyway, just to give an idea, here is a very, very basic configuration sample, providing only normal internet use for inside clients. Comments and improvements are welcome. Bye!

class-map type inspect match-any CLASS_OUT
 match protocol icmp
 match protocol http
 match protocol ftp
 match protocol dns
 match protocol pop3
 match protocol https
 match protocol imap
 match protocol smtp extended

policy-map type inspect POLICY_OUT
 class type inspect CLASS_OUT
  inspect
 class class-default

zone security IN
zone security OUT

zone-pair security IN_OUT source IN destination OUT
 service-policy type inspect POLICY_OUT

interface FastEthernet0/0
 zone-member security IN

interface FastEthernet0/1
 zone-member security OUT

Viewing 1 - 2 of 2

  • 1