Netband Project - Zone based Firewall(ZFW) - Revision history

Fatman: /* Security zones */

2009-10-15T13:25:02Z

‎Security zones

2009-06-04T08:42:36Z

‎Customising your matches

2009-06-04T08:40:32Z

2009-05-13T05:59:47Z

2009-05-13T05:59:22Z

‎Branch router with DMZ

2009-05-02T07:41:38Z

‎External links

2009-05-02T07:21:07Z

‎External links

2009-05-02T07:20:40Z

‎External links

2009-04-29T07:02:20Z

2009-04-27T12:48:58Z

‎Nifty Features

@@ Line 15: / Line 15: @@
 </pre>
 ===Security zones===
-Declaring Zones witch will be mapped to the interfaces
+Declaring Zones which will be mapped to the interfaces
 <pre>zone security INSIDE-ZONE
 zone security OUTSIDE-ZONE
 zone security DMZ-ZONE
 </pre>
 ===Vlan interfaces===
 Creating vlan interfaces for the different zones

@@ Line 36: / Line 36: @@
   zone-member security DMZ-ZONE
 </pre>
-===Customising your matches===
+===Customizing your matches===
 If you need a custom tcp port to be allowed to pass through the zones
 <pre>ip port-map user-streaming port tcp 8000 description Custom Video Streaming port
@@ Line 46: / Line 46: @@
   pattern ..*gambling.
 </pre>
 ===Class-maps===
 This will specify what traffic the class-maps will match on.

@@ Line 1: / Line 1: @@
 =Zone based Firewall(ZFW)=
 This page is part of the [[Netband_Project|Netband Project]]<br/>
+__NOTOC__
 ==Branch router with DMZ==
 In this example the configuration will what you would expect from a branch office with an inside, outside and a DMZ interface for local servers.

@@ Line 1: / Line 1: @@
 This page is part of the [[Netband_Project|Netband Project]]<br/>
 ==Branch router with DMZ==
-In this exaple the configuration will what you would expect from a branch office with an inside, outside and a DMZ interface for local servers.
+In this example the configuration will what you would expect from a branch office with an inside, outside and a DMZ interface for local servers.
 ZFW is not like IOS firewalling with ip inspect, the inspect firewall is a per interface rule firewall where ZFW is a direction firewall with one-to-one, one-to-many or many-to-many.
 ===Vlans===

@@ Line 102: / Line 102: @@
   service-policy type inspect OUTSIDE-DMZ-PMAP
 </pre>
 ==Nifty Features==
 All this zone-based firewalling is not only a layer3 thing.<br/>

@@ Line 111: / Line 111: @@
 <br>
 http://www.cisco.com/en/US/docs/ios/sec_data_plane/configuration/guide/sec_zone_polcy_firew.html
-[[Category:network]][[Category:CCNP]][[category:students]]
+[[Category:network]][[Category:CCNP]][[category:students]][[category:CCNP4]]

← Older revision		Revision as of 07:20, 2 May 2009
Line 111:		Line 111:
	<br>		<br>
	http://www.cisco.com/en/US/docs/ios/sec_data_plane/configuration/guide/sec_zone_polcy_firew.html		http://www.cisco.com/en/US/docs/ios/sec_data_plane/configuration/guide/sec_zone_polcy_firew.html
		+	[[Category:network]][[Category:ccnp]][[category:students]]

← Older revision		Revision as of 07:02, 29 April 2009
Line 1:		Line 1:
−	~~<accesscontrol>NetBand</accesscontrol>~~
	This page is part of the [[Netband_Project\|Netband Project]]<br/>		This page is part of the [[Netband_Project\|Netband Project]]<br/>