How to simulate Zone Based Firewall in gns3

[Lasandro Lopez]

Dear All!
i want to know how i can simulate ZoneBased Firewall on cisco routers in GNS3.

in my actual routers, i'm using this model/images:

c2691-entservicesk9-mz.124-13b.bin

and

c3725-adventerprisek9-mz124-25.bin

In both of them i don't have this commands:

R1(config)#zone security

what can i do?

Regards!

[Liam Kenneally · Accepted solution]

Hi Lasandro,

I have implemented ZBF in GNS3.

According to Cisco feature navigator it is avaliable in images 12.4(6)T onwards on the 37(25/45)...

The latest image for the 37(25/45) That runs ZBF I can see is 12.4(15)T14 (

c3725-adventerprisek9-mz.124-15.T14.bin)

Train   Name

Release   Number

Life Cycle

EoL Info Avl

Platform   Name

Feature   Set

DRAM

Flash

Orderable

Image Name

12.4T	12.4(6)T	ED	No	3725	ADVANCED   ENTERPRISE SERVICES	256	64	No	c3725-adventerprisek9-mz.124-6.T.bin
12.4T	12.4(6)T	ED	No	3725	AISK9-AESK9   FEAT SET FACTORY UPG FOR BUNDLES	256	64	No	c3725-adventerprisek9-mz.124-6.T.bin
12.4T	12.4(6)T	ED	No	3725	SPSK9-AESK9   FEAT SET FACTORY UPG FOR BUNDLES	256	64	No	c3725-adventerprisek9-mz.124-6.T.bin
12.4T	12.4(6)T	ED	No	3725	INT   VOICE/VIDEO, IPIPGW, TDMIP GW AES	256	64	No	c3725-adventerprisek9_ivs-mz.124-6.T.bin
12.4T	12.4(6)T	ED	No	3725	ADVANCED   ENTERPRISE SERVICES WITH SNA SWITCHING	256	64	No	c3725-adventerprisek9_sna-mz.124-6.T.bin
12.4T	12.4(6)T	ED	No	3725	SPSK9-AISK9   FEAT SET FACTORY UPG FOR BUNDLES	256	64	No	c3725-advipservicesk9-mz.124-6.T.bin
12.4T	12.4(6)T	ED	No	3725	ADVANCED   IP SERVICES	256	64	No	c3725-advipservicesk9-mz.124-6.T.bin
12.4T	12.4(6)T	ED	No	3725	ADVANCED   SECURITY	256	64	No	c3725-advsecurityk9-mz.124-6.T.bin
12.4T	12.4(6)T	ED	No	3745	SPSK9-AESK9   FEAT SET FACTORY UPG FOR BUNDLES	256	64	No	c3745-adventerprisek9-mz.124-6.T.bin
12.4T	12.4(6)T	ED	No	3745	ADVANCED   ENTERPRISE SERVICES	256	64	No	c3745-adventerprisek9-mz.124-6.T.bin
12.4T	12.4(6)T	ED	No	3745	AISK9-AESK9   FEAT SET FACTORY UPG FOR BUNDLES	256	64	No	c3745-adventerprisek9-mz.124-6.T.bin
12.4T	12.4(6)T	ED	No	3745	INT   VOICE/VIDEO, IPIPGW, TDMIP GW AES	256	64	No	c3745-adventerprisek9_ivs-mz.124-6.T.bin
12.4T	12.4(6)T	ED	No	3745	ADVANCED   ENTERPRISE SERVICES WITH SNA SWITCHING	256	64	No	c3745-adventerprisek9_sna-mz.124-6.T.bin
12.4T	12.4(6)T	ED	No	3745	ADVANCED   IP SERVICES	256	64	No	c3745-advipservicesk9-mz.124-6.T.bin
12.4T	12.4(6)T	ED	No	3745	SPSK9-AISK9   FEAT SET FACTORY UPG FOR BUNDLES	256	64	No	c3745-advipservicesk9-mz.124-6.T.bin
12.4T	12.4(6)T	ED	No	3745	ADVANCED   SECURITY	256	32	No	c3745-advsecurityk9-mz.124-6.T.bin

GNS3Vault have a good tutorial into how to configure ZBF using the following image:-

c3725-adventerprisek9-mz.124-15.T7.bin

http://gns3vault.com/Security/basic-zone-based-firewall.html

HTH

Kind Regards,

Liam

[Lasandro Lopez]

Thank you for your reply!
i just download image

c3745-advipservicesk9-mz.124-15.T6.bin

and now i have the commands

R1(config)#zone security

Regards!

[Liam Kenneally]

Glad all is up and running

Regards,

Liam