IOS zone based firewall

[sarahr202]

HI everybody.

I have few questions.

policy-map type inspect PING

class type inspect PING

  inspect

class class-default

  pass

1)What is the order of operation?  The" inspect"  action will apply only to class " PING" . The action " pass" will be applied to class" default"   Am i correct?

-----------------------------------------------------

policy-map type inspect PING

class type inspect PING

  inspect

class class-default

2) What would be the action for class " default" when none is specified  as shown above ?

3)

class-map type inspect LEE

Above if we don't mention " match-all or match any"  , what is the default?

thanks and have a great day.

[Julio Carvajal · Accepted solution]

Hello Sarah,

1)What is the order of operation?  The" inspect"  action will apply only to class " PING" . The action " pass" will be applied to class" default"   Am i correct?

You got it, from top to bottom we will check the policy-maps.

2) What would be the action for class " default" when none is specified  as shown above ?

Drop by default

3)class-map type inspect LEE

Above if we don't mention " match-all or match any"  , what is the default?

I think it's a match all by default

Do a quick show run | sec class-map to figure it out

Remember to rate all of the helpful posts.

For this community that's as important as a thanks.

[sarahr202]

Thanks Jcarvaja

[Julio Carvajal]

Hey Sarah,

My pleasure,

Have a good one

Remember to rate all of the helpful posts.

For this community that's as important as a thanks.