Cisco CISCO876-SEC-I-K9 Configuration Guide - Page 94

Apply Access Lists and Inspection Rules to Interfaces

Page 94 highlights

Apply Access Lists and Inspection Rules to Interfaces Chapter 8 Configuring a Simple Firewall Apply Access Lists and Inspection Rules to Interfaces Perform these steps to apply the ACLs and inspection rules to the network interfaces, beginning in global configuration mode: Step 1 Command interface type number Example: Router(config)# interface vlan 1 Router(config-if)# Step 2 ip inspect inspection-name {in | out} Example: Router(config-if)# ip inspect firewall in Router(config-if)# Step 3 exit Example: Router(config-if)# exit Router(config)# Step 4 interface type number Example: Router(config)# interface fastethernet 4 Router(config-if)# Step 5 ip access-group {access-list-number | access-list-name}{in | out} Example: Router(config-if)# ip access-group 103 in Router(config-if)# Step 6 exit Example: Router(config-if)# exit Router(config)# Purpose Enters interface configuration mode for the inside network interface on your router. Assigns the set of firewall inspection rules to the inside interface on the router. Returns to global configuration mode. Enters interface configuration mode for the outside network interface on your router. Assigns the defined ACLs to the outside interface on the router. Returns to global configuration mode. Cisco 850 Series and Cisco 870 Series Access Routers Software Configuration Guide 8-4 OL-5332-01

  • 1
  • 2
  • 3
  • 4
  • 5
  • 6
  • 7
  • 8
  • 9
  • 10
  • 11
  • 12
  • 13
  • 14
  • 15
  • 16
  • 17
  • 18
  • 19
  • 20
  • 21
  • 22
  • 23
  • 24
  • 25
  • 26
  • 27
  • 28
  • 29
  • 30
  • 31
  • 32
  • 33
  • 34
  • 35
  • 36
  • 37
  • 38
  • 39
  • 40
  • 41
  • 42
  • 43
  • 44
  • 45
  • 46
  • 47
  • 48
  • 49
  • 50
  • 51
  • 52
  • 53
  • 54
  • 55
  • 56
  • 57
  • 58
  • 59
  • 60
  • 61
  • 62
  • 63
  • 64
  • 65
  • 66
  • 67
  • 68
  • 69
  • 70
  • 71
  • 72
  • 73
  • 74
  • 75
  • 76
  • 77
  • 78
  • 79
  • 80
  • 81
  • 82
  • 83
  • 84
  • 85
  • 86
  • 87
  • 88
  • 89
  • 90
  • 91
  • 92
  • 93
  • 94
  • 95
  • 96
  • 97
  • 98
  • 99
  • 100
  • 101
  • 102
  • 103
  • 104
  • 105
  • 106
  • 107
  • 108
  • 109
  • 110
  • 111
  • 112
  • 113
  • 114
  • 115
  • 116
  • 117
  • 118
  • 119
  • 120
  • 121
  • 122
  • 123
  • 124
  • 125
  • 126
  • 127
  • 128
  • 129
  • 130
  • 131
  • 132
  • 133
  • 134
  • 135
  • 136
  • 137
  • 138
  • 139
  • 140
  • 141
  • 142
  • 143
  • 144
  • 145
  • 146
  • 147
  • 148
  • 149
  • 150
  • 151
  • 152
  • 153
  • 154
  • 155
  • 156
  • 157
  • 158
  • 159
  • 160
  • 161
  • 162
  • 163
  • 164
  • 165
  • 166
  • 167
  • 168
  • 169
  • 170
  • 171
  • 172
  • 173
  • 174
  • 175
  • 176
  • 177
  • 178
  • 179
  • 180
  • 181
  • 182
  • 183
  • 184
  • 185
  • 186
  • 187
  • 188
  • 189
  • 190
  • 191
  • 192
  • 193
  • 194
  • 195
  • 196

8-4
Cisco 850 Series and Cisco 870 Series Access Routers Software Configuration Guide
OL-5332-01
Chapter 8
Configuring a Simple Firewall
Apply Access Lists and Inspection Rules to Interfaces
Apply Access Lists and Inspection Rules to Interfaces
Perform these steps to apply the ACLs and inspection rules to the network interfaces, beginning in global
configuration mode:
Command
Purpose
Step 1
interface
type number
Example:
Router(config)#
interface vlan 1
Router(config-if)#
Enters interface configuration mode for the
inside network interface on your router.
Step 2
ip inspect
inspection-name
{
in
|
out
}
Example:
Router(config-if)#
ip inspect firewall in
Router(config-if)#
Assigns the set of firewall inspection rules to the
inside interface on the router.
Step 3
exit
Example:
Router(config-if)#
exit
Router(config)#
Returns to global configuration mode.
Step 4
interface
type number
Example:
Router(config)#
interface fastethernet 4
Router(config-if)#
Enters interface configuration mode for the
outside network interface on your router.
Step 5
ip access-group
{
access-list-number
|
access-list-name
}{
in
|
out
}
Example:
Router(config-if)#
ip access-group 103 in
Router(config-if)#
Assigns the defined ACLs to the outside
interface on the router.
Step 6
exit
Example:
Router(config-if)#
exit
Router(config)#
Returns to global configuration mode.