LAB 12: Zone-Based Firewall

Task

Topology

1. Assign IP address to each routers.
2. Create Zone-Base Firewall on Router 1 then put interface F0/0 inside and F0/1 in outside zone.
3. Ensure R2 is able to ping R3 by name. You are allowed to make necessary configuration for the same.
4. R2 can copy a file from R4 using http, make necessary configuration.
5. NTP of all the router must be synchronize. Create R2 as NTP Server.

Solution

Task 2: Create Zone-Base Firewall on Router 1 then put interface F0/0 inside and F0/1 in outside zone.

On R1
=====

Class-map type inspect match-any INCP
    match protocol tcp
    match protocol udp
    match protocol icmp
    exit

policy-map type inspect INPM
    class type inspect INCP
    inspect
    exit
exit

zone security inside
zone security outside
zone-pair security ZIO source inside destination outside
    service-policy type inspect INPM
    exit

int f0/0
zone-member security inside
exit

int f0/1
zone-member security outside
exit

Task 3: Ensure R2 is able to ping R3 by name. You are allowed to make necessary configuration for the same.

On R2
=====

ip dns server
ip host R3 101.1.1.2


Task 4: R2 can copy a file from R4 using http, make necessary configuration.

On R4
=====

Ip http server
Ip http path flash:
copy running flash:
"File Name" which is save in flash

On R2
=====

Copy http://101.1.1.3/"file name" flash:

Task 5: NTP of all the router must be synchronizes. Create R2 as NTP Master.

On R2
=====

Set clock "Time & Date"

On R1
=====

Class-map type inspect match-any OUT
    match protocol ntp
    exit

policy-map type inspect OUTP
    class type inspect OUT
    pass
    exit
exit

zone security inside
zone security outside
zone-pair security NTP source outside destination inside
    service-policy type inspect OUTP
exit

int f0/0
zone-member security inside
exit

int f0/1
zone-member security outside
exit