About kbogart368

kbogart368 · 01-22-2019

Hi everyone,I've been experimenting with ZBFW using three routers, all running 15.3(3)XB12 and have run across an interesting problem. R3(Client= 3.3.3.3) -----Fa0/1.33 [R1(ZBFW)]-Serial1/3 ----- R4(Internet-Rtr = 4.4.4.4) When class-maps are configu...

kbogart368 · 01-23-2019

Hello Mohammed,I am not matching TFTP by referencing an ACL. I'm using the "match protocol tftp" statement within my Class-Map. However, you're right...I didn't think about the dynamic nature of TFTP ports. And (for protocols that don't randomize t...

kbogart368 · 01-23-2019

Thank you for the reply Mohammed, however I do have zone-pairs in both directions...both of which are referencing Policy-Maps containing the "pass" action for TFTP and DNS traffic, so that doesn't appear to be the reason this traffic is being dropped...

Member Since	‎10-24-2017 04:44 AM
Date Last Visited	‎01-23-2024 08:23 AM
Posts	3

User Statistics

User Activity

Zone-Based Firewall: "pass" action doesn't work with UDP...only "inspect"

Re: Zone-Based Firewall: "pass" action doesn't work with UDP...only "inspect"

Re: Zone-Based Firewall: "pass" action doesn't work with UDP...only "inspect"