ccna 4 connecting networks pdf

ccna 4 connecting networks pdf.The zone policy firewall has a number of other rules that are used to control the behavior of interfaces when routers are involved in traffic flows. When an interface is assigned to a zone. all traffic entering or leaving this interface is implicitly denied unless the interface on which the traffic enters or leaves is in the same zone or the traffic is going to any interface on the router.When ZPF is configured, all IP interfaces on the router automatically become part of its own zone. The self zone is the only exception to the default denyall policy. Unless explicitly denied, traffic to any interface on the router is allowed by default.4.3.3 Configuring the Zone Policy Firewall Using the CLI4.3.3.1 Steps to Configure ZBF Using the CLI4.3 Zone Policy Based Firewall 113There are several steps to configure ZPF using CLI as follows. Step 1 Create a firewall zone with the zone security command. Step 2 Define the traffic type with the class.map type inspect command. Step 3 Specify the firewall policy with the policy-map type inspect command. Step 4 Apply the firewall policy to the source and destination zone pairs with the zone-pair security command. Step 5 Use the zone-member security interface command to assign the interface to a zone.There are where factors to consider when configuring ZPF with the CLI.Only the policy mappings defined with the type inspect command are available for the zone-pair security command.Only class policies defined with the type inspect command can be used in policy mappings with type inspect.The names of class mappings or policy mappings cannot be duplicated. For example, the name of a QoS class mapping cannot be the same as the name of an inspect class mapping.