default class map is dropping all Packets

DaChuckler — Mon, 11 Mar 2019 23:45:37 GMT

Hello I have a Cisco 871 router that used to have Access list based security. now I am trying the ZBFW for the first time. I thought I had a pretty good program until I found all my traffic was getting dropped. This is my first stab at ZBFWs and I am a bit confused esp with the default class part. Any help is greatly appreciated!!!!

The router is for my house and thus also has to have priority for gaming. I will add the gaming and voice QOS once I get it working,

Guest VLAN has access to 2 IP's in Data for printing.

Cisco871#sh run

Building configuration...

Current configuration : 8005 bytes

version 12.4

no service pad

service timestamps debug datetime msec

service timestamps log datetime msec

no service password-encryption

service sequence-numbers

hostname Cisco871

boot-start-marker

boot-end-marker

logging buffered 4096

no logging console

aaa new-model

aaa authentication login default local

aaa authorization exec default local

aaa session-id common

clock summer-time PST recurring

crypto pki trustpoint TP-self-signed-4004039535

enrollment selfsigned

subject-name cn=IOS-Self-Signed-Certificate-4004039535

revocation-check none

rsakeypair TP-self-signed-4004039535

crypto pki certificate chain TP-self-signed-4004039535

certificate self-signed 01

3082024C 308201B5 A0030201 02020101 300D0609 2A864886 F70D0101 04050030

31312F30 2D060355 04031326 494F532D 53656C66 2D536967 6E65642D 43657274

69666963 6174652D 34303034 30333935 3335301E 170D3038 30323037 30373532

32375A17 0D323030 31303130 30303030 305A3031 312F302D 06035504 03132649

4F532D53 656C662D 5369676E 65642D43 65727469 66696361 74652D34 30303430

33393533 3530819F 300D0609 2A864886 F70D0101 01050003 818D0030 81890281

8100CEC2 7B89C73F AB4860EE 729C3B64 82139630 239A2301 8EA8B4C4 05505E25

B0F24E7F 26ECEC53 3E266E80 F3104F61 BDDC5592 40E12537 2262D272 08D38F8E

147F5059 7F632F5E 635B9CDF 652FFE82 C2F45C60 5F619AF0 72E640E0 E69EA9EF

41C6B06C DD8ACF4B 0A1A33CF AF3C6BFB 73AD6BE0 BD84DD7F 435BD943 0A22E0E5

F4130203 010001A3 74307230 0F060355 1D130101 FF040530 030101FF 301F0603

551D1104 18301682 144C7570 696E2E44 61627567 61626F6F 732E6F72 67301F06

03551D23 04183016 801473C6 E0784818 29A89377 23A22F5E BDD430CE E282301D

0603551D 0E041604 1473C6E0 78481829 A8937723 A22F5EBD D430CEE2 82300D06

092A8648 86F70D01 01040500 03818100 299AD241 442F976F 4F030B33 C477B069

D356C518 8132E61B 1220F999 A30A4E0C D337DCE5 C408E3BC 0439BB66 543CF585

8B26AA77 91FA510B 14796239 F272A306 C942490C A44336E0 A9430B81 9FC62524

E55017FA 5C5463D7 B3492753 42315BEC 32B78F24 D10B0CA7 D1844CD5 C3E466B9

3543BD68 A4B2692D 05CBF6DC C93C8142

quit

ip cef

no ip dhcp use vrf connected

ip dhcp excluded-address 10.0.0.1 10.0.0.5

ip dhcp excluded-address 172.16.15.1 172.16.15.5

ip dhcp excluded-address 172.16.15.14

ip dhcp excluded-address 172.16.17.1 172.16.17.5

ip dhcp excluded-address 192.168.19.1 192.168.19.5

ip dhcp pool MyNetNative

import all

network 10.0.0.0 255.255.255.248

default-router 10.0.0.1

domain-name MyNetNet.org

dns-server 4.2.2.1 4.2.2.6 8.8.8.8 208.67.220.220

lease 0 2

ip dhcp pool MyNetData

import all

network 172.16.15.0 255.255.255.240

dns-server 172.16.15.14 4.2.2.1 4.2.2.6 8.8.8.8 208.67.220.220

default-router 172.16.15.1

domain-name MyDomain.org

ip dhcp pool MyNetVoice

import all

network 172.16.17.0 255.255.255.240

dns-server 172.16.15.14

default-router 172.16.17.1

domain-name MyDomain.org

ip dhcp pool MyNetGuest

import all

network 192.168.19.0 255.255.255.240

default-router 192.168.19.1

domain-name MyNetGuest.org

dns-server 4.2.2.1 4.2.2.6 8.8.8.8 208.67.220.220

ip domain name MyDomain.org

ip name-server 172.16.15.14

ip name-server 4.2.2.4

ip inspect log drop-pkt

multilink bundle-name authenticated

parameter-map type inspect TCP_PARAM

parameter-map type inspect global

username MyAdmin privilege 15 secret 5 MyPassword

topic default class map is dropping all Packets in Network Security

default class map is dropping all Packets

default class map is dropping all Packets