Implement Zone Based Policy Firewall using the CLI

Introduction

The Implement zone based policy firewall using the CLI module provides you with the instructions and Cisco hardware to develop your hands on skills in the following topics:

• Configuring a zone to zone policy using the CLI
• Testing the zone to zone policy
• Configuring the self-zone using the CLI

Exercise 1 - Configuring Zone to Zone Policy using the CLI

In this exercise you will configure a zone to zone firewall policy on NYEDGE1 to enable web browsing to an external website. You will be connecting to the CLI of router NYEDGE1 using the console connection by clicking on the device tab on the left side of the screen.

Exercise 2 - Testing the Zone to Zone Policy

In this exercise you will test and confirm that the configuration applied in Exercise 1 is functioning correctly. You will also use some helpful commands that will show you the state of the zone to zone policy that you defined.

Exercise 3 - Configuring the Self-Zone using the CLI

In the previous exercise you went through configuring zones, class maps, policy maps and applying these policies to a zone pair to allow HTTP traffic over the firewall.