Configure Zone-Based Policy

Configure a Zone-Based Policy Firewall on a Cico 1941 router :

  • Create ACLs to define which traffic can go from zone to zone.
  • Create zones.
  • Assign zones to interfaces.
  • Create class maps to identify traffic.
  • Create policy maps to either drop, inspect or pass traffic. 
  • Assign the class map(s) to the policy map.
  • Configure zone pairs.
  • Associate the appropriate policy map to the zone pair.
  • Test and verify.

Leave a Reply

Your email address will not be published.