Deploying Zone-Based Firewalls

Chapter 3. Configuring Zone-Based Policy Firewalls in Cisco IOS

<feature><title> </title>

• Initial Zone-Based Policy Firewall Configuration 30

• Limiting Inside-to-Outside Traffic 37

• Protecting the Router 43

• Monitoring and Debugging Zone-Based Policy Firewall Configuration 47

</feature>

In the previous chapters, you’ve seen how you can design your firewall using the zone-based design concepts. In this chapter, you’ll find the Cisco IOS configuration commands that enable you to translate the firewall policy into a working router configuration. Throughout this chapter, we focus on the simple LAN-to-Internet firewall design described in the preceding chapter. Figure 3-1 outlines the addressing scheme used in the examples.

Figure 3-1. Sample firewall with ...