ccna 4 exam 7

ccna 4 exam 7.4.3 Zone-Based Policy Firewall 115 The traffic class for which a certain behavior is to be performed must be specified in the policy map: Router(config-pmap)# class type inspect class -name The default class (matching all remaining traffic) is specified using the following command.Router(config-pmap)# class class-defaultFinally, specify the behavior to be taken on the traffic.Router(config-pmap-c)# pass| inspect | drop [log] | police4.3.3.5 Applying a firewall policy and assigning router interfacesApplying a Firewall PolicyAfter configuring a firewall policy, the administrator uses the zone-pairsecurity command to apply it to traffic between a pair of zones. To apply a policy, you must first create a zone pair. Specify the source zone, the destination zone, and the policy used to handle traffic between them. Router(config)# zone-pair security zone-pair-name [source source-zone-name | self] destination [self | destination-zone-name] After you enter the zone-pair security command, enter the service-policy type inspect policy-map-name command to associate the policy map and the behavior associated with it with the zone pair. You can also configure deep packet inspection (associating a Layer 7 policy map to a top-level policy map), which is used by CiscoIOS 12.4(20)T The syntax is as follows.Router(config-pmap-c)# service-policy {h323 | http | im | imap | p2p| pop3| sip Ismtp Isunrpc | urlfilter} policy-mappolicymap is the name of a Layer 7 policy map applied to a Layer 3 or Layer 4 policy map.Assigning Router Interfaces