鸿鹄论坛 › CCIE认证交流 › K4 ZONE-BASED FIREWALL不出效果，请各位老大帮忙查看

clcomcom 发表于 2014-1-23 15:28:24

K4 ZONE-BASED FIREWALL不出效果，请各位老大帮忙查看

奉上配置，请各位帮忙看一下哪里错了，谢谢！

class-map match-all bb1
match access-group 1



match input-interface FastEthernet0/1

class-map type inspect match-all A_B
match protocol icmp
!         
!
policy-map type inspect pmap_A_B
class type inspect A_B
pass
class class-default
pass
policy-map shape
class bb1
shape average 128000
!
zone security A
zone security B
zone-pair security A_B source A destination B
service-policy type inspect pmap_A_B
zone-pair security B_A source B destination A
service-policy type inspect pmap_A_B

Juispan 发表于 2014-1-23 15:31:08

记得接口下也要敲

maxqueen 发表于 2014-1-23 16:24:22

接口上的配置呢？

shaoyung 发表于 2014-1-23 20:28:22

{:6_267:}

hgx1218 发表于 2014-1-24 05:06:51

接口下调用zone-member security.

查看完整版本: K4 ZONE-BASED FIREWALL不出效果，请各位老大帮忙查看