IOS ZBPFW Parameter-maps

[Chris Lester]

Hi All.

I have an ASR1001  where each interface in part of a VRF for services segregation.  When implementing a ZBPF policy, specifically a Parameter-map type,  i noticed there can be a number of inspect flavours.  type inspect / inspect-global / inspect-vrf / inspect-zone..

Is there any reason/benefit to use one of the other if the PMAP is the same for all zones ?

Thanks for your help and feedback.

Chris

[Vibhor Amrodia]

Hi,

These are specifically for different implementations of the ZBF on the routers.

I think this should provide you more information:-

http://www.cisco.com/c/en/us/td/docs/ios-xml/ios/security/m1/sec-m1-cr-book/sec-cr-p1.html#wp3258547648

Thanks and Regards,

Vibhor Amrodia