Step 1 |
enable
Example:
|
Enables privileged EXEC mode.
|
Step 2 |
configure
terminal
Example:
Device# configure terminal
|
Enters global configuration mode.
|
Step 3 |
zone
security
{zone-name |
default}
Example:
Device(config)# zone security z-client
|
Creates a security zone and enters security zone configuration mode.
-
Your configuration must have two security zones to create a zone pair: a source zone and a destination zone.
-
In a zone pair, you can use the default zone or self zone as either the source or destination zone.
|
Step 4 |
exit
Example:
Device(config-sec-zone)# exit
|
Exits security zone configuration mode and returns to global configuration mode.
|
Step 5 |
zone
security
{zone-name |
default}
Example:
Device(config)# zone security z-server
|
Creates a security zone and enters security zone configuration mode.
-
Your configuration must have two security zones to create a zone pair: a source zone and a destination zone.
-
In a zone pair, you can use the default zone as either the source or destination zone.
|
Step 6 |
exit
Example:
Device(config-sec-zone)# exit
|
Exits security zone configuration mode and returns to global configuration mode.
|
Step 7 |
zone-pair
security
zone-pair-name
source
source-zone-name
destination
destination-zone-name
Example:
Device(config)# zone-pair security clt2srv source z-client destination z-server
|
Creates a zone pair and enters security zone-pair configuration mode.
|
Step 8 |
service-policy
type
inspect
policy-map-name
Example:
Device(config-sec-zone-pair)# service-policy type inspect sunrpc-l4-pmap
|
Attaches a firewall policy map to a zone pair.
|
Step 9 |
exit
Example:
Device(config-sec-zone-pair)# exit
|
Exits security zone-pair configuration mode and returns to global configuration mode.
|
Step 10 |
interface
type
number
Example:
Device(config)# interface gigabitethernet 2/0/0
|
Configures an interface type and enters interface configuration mode.
|
Step 11 |
ip
address
ip-address
mask
[secondary [vrf
vrf-name]]
Example:
Device(config-if)# ip address 192.168.6.5 255.255.255.0
|
Sets a primary or secondary IP address for an interface.
|
Step 12 |
zone-member
security
zone-name
Example:
Device(config-if)# zone-member security z-client
|
Attaches an interface to a security zone.
|
Step 13 |
exit
Example:
|
Exits interface configuration mode and returns to global configuration mode.
|
Step 14 |
interface
type
number
Example:
Device(config)# interface gigabitethernet 2/1/1
|
Configures an interface type and enters interface configuration mode.
|
Step 15 |
ip
address
ip-address
mask
[secondary [vrf
vrf-name]]
Example:
Device(config-if)# ip address 192.168.6.1 255.255.255.0
|
Sets a primary or secondary IP address for an interface.
|
Step 16 |
zone-member
security
zone-name
Example:
Device(config-if)# zone-member security z-server
|
Attaches an interface to a security zone.
|
Step 17 |
end
Example:
|
Exits interface configuration mode and returns to privileged EXEC mode.
|