Troubleshooting IOS Firewalls

IOS Firewalls require relatively few steps to set up. Therefore, misconfigurations are few and far between. This section looks at some of the issues that can cause the IOS Firewall to behave unexpectedly.

IOS Firewall Order of Operations

As with NAT, understanding at what point in a packet's path CBAC kicks in and how the access lists are processed can make implementing a firewall much easier and more trouble-free. Table 24-5 shows the order in which various packets pass through the router. “Inside” is generally the private network behind the router, and “outside” is the network on the public side of the router.

Table 24-5. Order in Which Various Operations Are Performed for Packets Passing Through a Router
Inside ...

Get Network Security Principles and Practices now with the O’Reilly learning platform.

O’Reilly members experience books, live events, courses curated by job role, and more from O’Reilly and nearly 200 top publishers.