cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
812
Views
0
Helpful
1
Replies

Missing ZBFW inspect commands on ISR 4351: policy-map type inspect, etc.

Voler
Level 1
Level 1

Greetings,

after buying a new router, I was faced with the impossibility of setting up the inspect rules.

In Cisco Feature Navigator i see feauture Firewall Stateful Inspection of ICMP, but can not setup it and also other inspect rules, because there are no commands:

Router(config)#platform ins?
% Unrecognized command

Router(config)#policy-map type ?
access-control access-control specific policy-map
control Configure a control policy-map
packet-service Configure Packet Service Policy Map
service policymap service configuration
service-chain Configure Service Chain Policy Map

Router(config)#class-map type ?
access-control access-control specific class-map
control Configure a control policy class-map
multicast-flows multicast class-maps
stack class-map for protocol header stack specification
traffic Configure a subscriber policy traffic classmap

as described in this reference https://www.cisco.com/c/en/us/td/docs/ios-xml/ios/sec_data_zbf/configuration/xe-16/sec-data-zbf-xe-16-book/sec-zone-pol-fw.html

 

Do I need to install another firmware or buy a license?
Thanks for any info.

 

Platform: ISR 4351

Image: isr4300-universalk9_npe.16.08.01.SPA.bin

1 Accepted Solution

Accepted Solutions

On the ISR 4k you need the security license to configure firewalling. It seems that you don't have that.

View solution in original post

1 Reply 1

On the ISR 4k you need the security license to configure firewalling. It seems that you don't have that.

Review Cisco Networking products for a $25 gift card