About DazOG

DazOG · 11-28-2023

HiI have a working "ip sla" setup, following the instructions here: https://www.cisco.com/c/en/us/support/docs/ip/ip-routing/200785-ISP-Failover-with-default-routes-using-I.html and elsewhere.The problem I've got is that in the example above the test...

DazOG · 11-27-2023

HiI've got a working ZBFW config, but I must admit I'm struggling to understand the differences between these commands:policy-map type inspect NAMEpolicy-map NAMEclass-map type inspect NAMEclass-map NAMECisco's documentation says:When an inspect-type...

DazOG · 11-23-2023

HiI’m migrating from a CBAC based basic firewall configuration on a 800 series router to an ISR, and am trying to get ZBFW working. I’m obviously doing something wrong because nothing works What I’m basically trying to achieve is to allow everyone o...

DazOG · 11-20-2023

HiReally hoping someone can help as I feel like a bit of an idiot at the moment…I’ve got a Cisco 887VA router that I’m looking to replace with an ISR4451-X. The 887VA is connected to a fibre router provided by our supplier (a Technicolor DGA4134). ...

DazOG · 11-13-2023

Hi I'm building a dual ISP failover config, which I believe I have got sorted out (second to-be-primary ISP isn't online yet to test, but the "ip sla" etc stuff is using the correct failback route). Where I'm a bit confused is how to handle static NA...

DazOG · 11-28-2023

Thanks. I've chosen another public DNS server that we aren't using for anything else anyway.

DazOG · 11-28-2023

Thanks. I guess that would make that IP (Google’s DNS) inaccessible via whichever ISP is currently being used, wouldn’t it?

DazOG · 11-27-2023

I assume that is the same if it uses a match access-group (ACL) instead of “match protocol https”?

DazOG · 11-27-2023

Sorry I still don't understand. I appreciate you trying to help but it's not clear what you're saying...What is the difference between:class-map TESTMAP match protocol httpspolicy-map type inspect TESTPOLICY class type inspect TESTMAP inspe...

DazOG · 11-27-2023

Thanks. It's still not very clear to me when I should use "type inspect" on either a policy-map or class-map, or both, and what happens if I don't....For example, if I have an ACL that allows inbound connections to specific internal hosts on specifi...

Member Since	‎11-07-2023 08:04 AM
Date Last Visited	‎12-06-2023 05:45 AM
Posts	20
Total Helpful Votes Received	5

User Statistics

User Activity

Failover ISP setup - can't ping Internet from standby interface

"policy-map type inspect XX" vs "policy-map XX", etc

First time ZBFW config - can’t access anything

Upgrade from C887VA to ISR4451 - no Internet, gateway IP = network?

Static NAT translations and ACLs with dual failover ISP config

Re: Failover ISP setup - can't ping Internet from standby interface

Re: Failover ISP setup - can't ping Internet from standby interface

Re: "policy-map type inspect XX" vs "policy-map XX&quot

Re: "policy-map type inspect XX" vs "policy-map XX&quot

Re: "policy-map type inspect XX" vs "policy-map XX&quot