02-26-2019 01:04 AM
Greetings,
after buying a new router, I was faced with the impossibility of setting up the inspect rules.
In Cisco Feature Navigator i see feauture Firewall Stateful Inspection of ICMP, but can not setup it and also other inspect rules, because there are no commands:
Router(config)#platform ins?
% Unrecognized command
Router(config)#policy-map type ?
access-control access-control specific policy-map
control Configure a control policy-map
packet-service Configure Packet Service Policy Map
service policymap service configuration
service-chain Configure Service Chain Policy Map
Router(config)#class-map type ?
access-control access-control specific class-map
control Configure a control policy class-map
multicast-flows multicast class-maps
stack class-map for protocol header stack specification
traffic Configure a subscriber policy traffic classmap
as described in this reference https://www.cisco.com/c/en/us/td/docs/ios-xml/ios/sec_data_zbf/configuration/xe-16/sec-data-zbf-xe-16-book/sec-zone-pol-fw.html
Do I need to install another firmware or buy a license?
Thanks for any info.
Platform: ISR 4351
Image: isr4300-universalk9_npe.16.08.01.SPA.bin
Solved! Go to Solution.
02-26-2019 04:02 AM
On the ISR 4k you need the security license to configure firewalling. It seems that you don't have that.
02-26-2019 04:02 AM
On the ISR 4k you need the security license to configure firewalling. It seems that you don't have that.
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide