Missing ZBFW inspect commands on ISR 4351: policy-map type inspect, etc.

Voler — Tue, 26 Feb 2019 09:04:00 GMT

Greetings,

after buying a new router, I was faced with the impossibility of setting up the inspect rules.

In Cisco Feature Navigator i see feauture Firewall Stateful Inspection of ICMP, but can not setup it and also other inspect rules, because there are no commands:

Router(config)#platform ins?
% Unrecognized command

Router(config)#policy-map type ?
access-control access-control specific policy-map
control Configure a control policy-map
packet-service Configure Packet Service Policy Map
service policymap service configuration
service-chain Configure Service Chain Policy Map

Router(config)#class-map type ?
access-control access-control specific class-map
control Configure a control policy class-map
multicast-flows multicast class-maps
stack class-map for protocol header stack specification
traffic Configure a subscriber policy traffic classmap

as described in this reference https://www.cisco.com/c/en/us/td/docs/ios-xml/ios/sec_data_zbf/configuration/xe-16/sec-data-zbf-xe-16-book/sec-zone-pol-fw.html

Do I need to install another firmware or buy a license?
Thanks for any info.

Platform: ISR 4351

Image: isr4300-universalk9_npe.16.08.01.SPA.bin

Re: Missing ZBFW inspect commands on ISR 4351: policy-map type inspect, etc.

Karsten Iwen — Tue, 26 Feb 2019 12:02:20 GMT

On the ISR 4k you need the security license to configure firewalling. It seems that you don't have that.

topic Re: Missing ZBFW inspect commands on ISR 4351: policy-map type inspect, etc. in Network Security

Missing ZBFW inspect commands on ISR 4351: policy-map type inspect, etc.

Re: Missing ZBFW inspect commands on ISR 4351: policy-map type inspect, etc.