Cisco IOS Firewall - Revision history

Pio2pio: /* Enable security9 feature */

2013-12-10T23:18:17Z

Enable security9 feature

← Older revision		Revision as of 01:18, 11 December 2013
Line 40:		Line 40:
	Store Index: 0		Store Index: 0
	Store Name: Built-In License Storage		Store Name: Built-In License Storage

			After reboot you will see during booting sequence:
			Installed image archive
			Cisco CISCO1941/K9 (revision 1.0) with 487424K/36864K bytes of memory.
			Processor board ID **********
			6 Gigabit Ethernet interfaces
			3 terminal lines
			1 Virtual Private Network (VPN) Module
			2 Cellular interfaces

	== Disable security9 feature ==		== Disable security9 feature ==

Pio2pio: /* CBAC - BAC - Context Based Access Control */

2013-12-08T12:35:38Z

CBAC - BAC - Context Based Access Control

← Older revision		Revision as of 14:35, 8 December 2013
Line 65:		Line 65:
	duplex auto		duplex auto
	speed auto		speed auto
			= References =
			*[http://packetlife.net/blog/2011/apr/21/applying-cbac-inspection-local-traffic/ Applying CBAC Inspection to Local Traffic]

Pio2pio: /* CBAC - BAC - Context Based Access Control */

2013-12-08T12:34:26Z

CBAC - BAC - Context Based Access Control

← Older revision		Revision as of 14:34, 8 December 2013
Line 46:		Line 46:

	= CBAC - BAC - Context Based Access Control =		= CBAC - BAC - Context Based Access Control =
	~~CBAC~~		WIP....
			license boot module c1900 technology-package securityk9

			ip inspect name REMEMBER tcp
			ip inspect name REMEMBER udp
			ip inspect name REMEMBER icmp


			ip access-list extended INTERNET-IN
			permit udp any eq domain any
			deny ip any any log

			interface GigabitEthernet0/0
			ip address dhcp
			ip access-group INTERNET-IN in
			ip nat enable
			ip inspect REMEMBER out
			duplex auto
			speed auto

Pio2pio: /* Disable security9 feature */

2013-12-08T12:00:13Z

Disable security9 feature

← Older revision		Revision as of 14:00, 8 December 2013
Line 42:		Line 42:

	== Disable security9 feature ==		== Disable security9 feature ==
	r1(config)#<span style="color: red">no</span> ~~license boot module c1900 technology-package securityk9~~		r1(config)#license boot module c1900 technology-package securityk9 <span style="color: red">disable</span>
	Then <code>write</code> configuration and reload the router. Verify the license features using show commands from the [[Cisco_IOS_Firewall#Enable_security9_feature \| previous point]].		Then <code>write</code> configuration and reload the router. Verify the license features using show commands from the [[Cisco_IOS_Firewall#Enable_security9_feature \| previous point]].

	= CBAC - BAC - Context Based Access Control =		= CBAC - BAC - Context Based Access Control =
	CBAC		CBAC

Pio2pio: /* Enable security9 feature */

2013-12-08T11:58:11Z

Enable security9 feature

← Older revision		Revision as of 13:58, 8 December 2013
Line 15:		Line 15:

	r1(config)#license boot module c1900 technology-package securityk9		r1(config)#license boot module c1900 technology-package securityk9
	Then <code>write</code> configuration and reload the router. Verify the license features.		Then <code>write</code> configuration and reload the router.
			;Verify the license features.
	'''show license feature'''		'''show license feature'''
	Feature name Enforcement Evaluation Subscription Enabled RightToUse		Feature name Enforcement Evaluation Subscription Enabled RightToUse
Line 39:		Line 40:
	Store Index: 0		Store Index: 0
	Store Name: Built-In License Storage		Store Name: Built-In License Storage

	== Disable security9 feature ==		== Disable security9 feature ==
	r1(config)#<span style="color: red">no</span> license boot module c1900 technology-package securityk9		r1(config)#<span style="color: red">no</span> license boot module c1900 technology-package securityk9

Pio2pio: /* Disable security9 feature */

2013-12-08T11:57:34Z

Disable security9 feature

← Older revision		Revision as of 13:57, 8 December 2013
Line 41:		Line 41:
	== Disable security9 feature ==		== Disable security9 feature ==
	r1(config)#<span style="color: red">no</span> license boot module c1900 technology-package securityk9		r1(config)#<span style="color: red">no</span> license boot module c1900 technology-package securityk9
	Then <code>write</code> configuration and reload the router. Verify the license features using show commands from the previous point.		Then <code>write</code> configuration and reload the router. Verify the license features using show commands from the [[Cisco_IOS_Firewall#Enable_security9_feature \| previous point]].

	= CBAC - BAC - Context Based Access Control =		= CBAC - BAC - Context Based Access Control =
	CBAC		CBAC

Pio2pio: Created page with "This is about configuring firewall on Cisco IOS - not ASA. Base line router here is Cisco 1941/K9 platform with following softwre vesion: (C1900-UNIVERSALK9-M), Version 15.2(4..."

2013-12-08T11:55:17Z

Created page with "This is about configuring firewall on Cisco IOS - not ASA. Base line router here is Cisco 1941/K9 platform with following softwre vesion: (C1900-UNIVERSALK9-M), Version 15.2(4..."

New page

This is about configuring firewall on Cisco IOS - not ASA. Base line router here is Cisco 1941/K9 platform with following softwre vesion: (C1900-UNIVERSALK9-M), Version 15.2(4)M4, RELEASE SOFTWARE (fc2).

= License =
Cisco1941/K9 arrives with universal image but CBAC and firewall features require ''securityk9'' feature to be enabled to make it work.
== Enable security9 feature ==
'''show license feature'''
Feature name Enforcement Evaluation Subscription Enabled RightToUse
ipbasek9 no no no yes no
securityk9 yes yes no '''no''' yes
datak9 yes yes no no yes
SSL_VPN yes yes no no yes
ios-ips-update yes yes yes no yes
hseck9 yes no no no no
WAAS_Express yes yes no no yes

r1(config)#license boot module c1900 technology-package securityk9
Then <code>write</code> configuration and reload the router. Verify the license features.
'''show license feature'''
Feature name Enforcement Evaluation Subscription Enabled RightToUse
ipbasek9 no no no yes no
securityk9 yes yes no '''yes''' yes
datak9 yes yes no no yes
SSL_VPN yes yes no no yes
ios-ips-update yes yes yes no yes
hseck9 yes no no no no
WAAS_Express yes yes no no yes

'''show license detail securityk9'''
Feature: securityk9 '''Period left: 8 weeks 3 days'''
Index: 1 Feature: securityk9 Version: 1.0
License Type: EvalRightToUse
License State: '''Active, In Use'''
Evaluation total period: 8 weeks 4 days
Evaluation period left: 8 weeks 3 days
Period used: 10 minutes 48 seconds
Transition date: Feb 06 2014 11:34:49
License Count: Non-Counted
License Priority: Low
Store Index: 0
Store Name: Built-In License Storage
== Disable security9 feature ==
r1(config)#no license boot module c1900 technology-package securityk9
Then <code>write</code> configuration and reload the router. Verify the license features using show commands from the previous point.

= CBAC - BAC - Context Based Access Control =
CBAC