Archive

Archive for November, 2010

Decode of a Zone Based Firewall created by SDM

November 3rd, 2010 martinrenshaw No comments
Here is my decode of the config applied to Cisco 3745 router using the SDM wizard for a Zone Based Firewall

Info on about ZBF can be found at the following links:

Overview on the config for ZBF

More Indepth look from Cisco (12.4T)

Video about ZBF from ipexpert.com

We have two security zones defined, “in-zone” & “out-zone”

code 1
!
zone security in-zone
zone security out-zone
!
!
interface FastEthernet0/1
description $FW_INSIDE$
ip address 192.168.3.1 255.255.255.0
zone-member security in-zone
speed 100
full-duplex
!
interface Serial0/1
description $FW_OUTSIDE$
ip address 10.2.2.1 255.255.255.252
zone-member security out-zone
clock rate 2000000
!

Read more…

Categories: CCNA Sec Tags: ,