topic IOS zone based firewall in Network Security

IOS zone based firewall

sarahr202 — Tue, 12 Mar 2019 01:57:08 GMT

HI everybody.

I have few questions.

policy-map type inspect PING

class type inspect PING

inspect

class class-default

pass

1)What is the order of operation? The" inspect" action will apply only to class " PING" . The action " pass" will be applied to class" default" Am i correct?

-----------------------------------------------------

policy-map type inspect PING

class type inspect PING

inspect

class class-default

2) What would be the action for class " default" when none is specified as shown above ?

class-map type inspect LEE

Above if we don't mention " match-all or match any" , what is the default?

thanks and have a great day.

IOS zone based firewall

Julio Carvajal — Thu, 13 Jun 2013 01:17:20 GMT

Hello Sarah,

1)What is the order of operation? The" inspect" action will apply only to class " PING" . The action " pass" will be applied to class" default" Am i correct?

You got it, from top to bottom we will check the policy-maps.

2) What would be the action for class " default" when none is specified as shown above ?

Drop by default

3)class-map type inspect LEE

Above if we don't mention " match-all or match any" , what is the default?

I think it's a match all by default

Do a quick show run | sec class-map to figure it out

Remember to rate all of the helpful posts.

For this community that's as important as a thanks.

IOS zone based firewall

sarahr202 — Thu, 13 Jun 2013 01:49:37 GMT

Thanks Jcarvaja

IOS zone based firewall

Julio Carvajal — Thu, 13 Jun 2013 02:48:51 GMT

Hey Sarah,

My pleasure,

Have a good one

Remember to rate all of the helpful posts.

For this community that's as important as a thanks.