Różnice

Różnice między wybraną wersją a wersją aktualną.

--- notatki:cisco_zbf [2025/05/16 16:52] – administrator
+++ notatki:cisco_zbf [2025/05/16 17:24] (aktualna) – administrator
@@ Linia 1: / Linia 1: @@
-====== Konfiguracja Cisco Zone-Based Firewall (ZBF) ======
+====== Cisco: Konfiguracja Zone-Based Firewall (ZBF) ======
 === Wprowadzenie ===
@@ Linia 62: / Linia 62: @@
 class class-default
 drop </code>
+====== Przykład konfiguracji ======
+{{:notatki:pasted:20250516-171827.png}}
+konfiguracja routera:
+<code>
+*Mar  1 00:20:35.819: %SYS-5-CONFIG_I: Configured from console by console
+R1#show running-config
+Building configuration...
+Current configuration : 1701 bytes
+!
+version 12.4
+service timestamps debug datetime msec
+service timestamps log datetime msec
+no service password-encryption
+!
+hostname R1
+!
+boot-start-marker
+boot-end-marker
+!
+!
+no aaa new-model
+memory-size iomem 5
+no ip icmp rate-limit unreachable
+ip cef
+!
+!
+!
+!
+no ip domain lookup
+!
+multilink bundle-name authenticated
+!
+!
+!
+!
+!
+!
+!
+!
+!
+!
+!
+!
+!
+!
+!
+!
+!
+!
+!
+!
+!
+archive
+ log config
+  hidekeys
+!
+!
+!
+!
+ip tcp synwait-time 5
+!
+class-map type inspect match-any TELNET-CLASS
+ match protocol telnet
+!
+!
+policy-map type inspect POLICY-INSIDE-TO-OUTSIDE
+ class type inspect TELNET-CLASS
+  inspect
+ class class-default
+  drop
+!
+zone security INSIDE
+zone security OUTSIDE
+zone-pair security ZP-INSIDE-OUTSIDE source INSIDE destination OUTSIDE
+ service-policy type inspect POLICY-INSIDE-TO-OUTSIDE
+!
+!
+!
+!
+interface FastEthernet0/0
+ ip address 1.0.0.1 255.255.255.0
+ zone-member security INSIDE
+ duplex auto
+ speed auto
+!
+interface Serial0/0
+ no ip address
+ shutdown
+ clock rate 2000000
+!
+interface FastEthernet0/1
+ ip address 2.0.0.1 255.255.255.0
+ zone-member security OUTSIDE
+ duplex auto
+ speed auto
+!
+interface Serial0/1
+ no ip address
+ shutdown
+ clock rate 2000000
+!
+interface Serial0/2
+ no ip address
+ shutdown
+ clock rate 2000000
+!
+interface FastEthernet1/0
+ no ip address
+ shutdown
+ duplex auto
+ speed auto
+!
+interface FastEthernet2/0
+ no ip address
+ shutdown
+ duplex auto
+ speed auto
+!
+ip forward-protocol nd
+!
+!
+no ip http server
+no ip http secure-server
+!
+no cdp log mismatch duplex
+!
+!
+!
+!
+!
+!
+control-plane
+!
+!
+!
+!
+!
+!
+!
+!
+!
+!
+line con 0
+ exec-timeout 0 0
+ privilege level 15
+ logging synchronous
+line aux 0
+ exec-timeout 0 0
+ privilege level 15
+ logging synchronous
+line vty 0 4
+ login
+!
+!
+end
+</code>
+Test:
+<code>
+R3# ping 2.0.0.2
+Type escape sequence to abort.
+Sending 5, 100-byte ICMP Echos to 2.0.0.2, timeout is 2 seconds:
+.....
+Success rate is 0 percent (0/5)
+R3#telnet 2.0.0.2
+Trying 2.0.0.2 ... Open
+User Access Verification
+Username: admin
+Password:
+R2>
+</code>

Kacper's Wiki

Narzędzia użytkownika

Narzędzia witryny

Różnice

Narzędzia strony