ccna 4 notes pdf

ccna 4 notes pdf.Finally, the administrator must assign the interface to the correct zone using the zone member interface command.Router(config-if)# zone-member security zone-nameThe zone-member security command places the interface in a security zone. After an interface is in a zone, traffic flowing through the interface (except traffic destined for or generated by the router) is discarded by default. In order for traffic to pass through an interface that is a member of a zone, the zone must be part of a zone pair to which a policy has been applied. If the policy allows traffic (through inspect or pass behavior), the traffic can pass through the interface.Configuring ZPF with the CLI may seem a bit complicated, but the good news is that there are two ways to configure ZPF: CiscoIOSCLI or CCPo4.3.4 Configuring the Zone Policy Firewall with the CCP Wizard4.3.4.1 Basic and Advanced Firewall WizardsWhen using CCP, ZBFOs can be created with either the Basic or Advanced Firewall WizardCCP's Basic Firewall Wizard can implement a firewall with two zones: an internal zone and an external zone. The wizard creates the firewall by asking for information related to the router interface and the rules used in the firewall. The difference between the Basic Firewall Wizard and the Advanced Firewall Wizard is that the Advanced Firewall Wizard can be used to define a secure DMZ for services accessible via the Internet. In addition, the Advanced Firewall Wizard allows the user to select the default security level when the firewall is first implemented.To access the Advanced Firewall Configuration Wizard using CCP, proceed as shown in the following steps. Step 1 In the CCP, select Configuration > Firewall > Firewalk116 Chapter 4 Implementing Firewall Technologies Step 2 In the CreateFirewall tab, click the AdvancedFirewall option, and then click the Launchtheselected task button. Step 3 The AdvancedFirewallConfiguration Wizard window appears. Click Next to start the configuration.