Welcome to our Online Store!

About Cisco IOS Firewall Command Resolution

2018-06-25 10:37:33

[Abstract article] This article gives you a detailed introduction to how to configure Cisco IOS Firewall, and to introduce the specific operation steps for configuring IOS, I hope to read this article will help you. This article gives you a detailed introduction of how to configure the Cisco IOS Firewall, and to introduce you to the specific operating procedures for configuring the IOS, I hope to read this article will help you.

Although some people think that the firewall is no longer brilliant, but I believe that if you take full advantage of the firewall function in the device, it is still a reinforced security choice. This article will show the basic steps for setting up a Cisco IOS Firewall.

Note that some of the content in this article is part of the IOS Firewall feature set. If you do not have a firewall feature set on your router, do not run the firewall command. However, in order to enhance security, I recommend that you use the IOS version that supports the firewall. Although only NAT can provide the minimum degree for your internal network, your Internet-facing router is more vulnerable to hackers. (The following commands omit the prompt and are explained or described under each command.)

enable

Enter user mode

configt

Enter global configuration mode

ipdhcpexcluded-address1192.168.100.192.168.100.1192.168.100.10

Exclude the top 10 IP addresses from the internal DHCP address pool

ipdhcppoolInternal-DHCP

Create a DHCP Pool called "InternalDHCP"

importall

Import External DHCP Settings from the ISP to "InternalDHCP" Pooling

network192.168.100.0255.255.255.0

Define the network this DHCP pool is running on

deult-router192.168.100.1

> Set a default gateway for the "InternalDHCP" pool

ipinspectnamecbactcp

Check outgoing data traffic to allow internal response TCP traffic

ipinspectnamecbacudp< /p>

Check outgoing data traffic to allow internal response to UDP traffic

Address: Room110,No.389 Jinwan Road,Shanghai,China

Email: daisy.dai@ccitel.com
service time: 7x24 hour

CCIT ICT PRODUCTS