Question: Did I set this up correctly? If not, please let me know how I can fix it. Configure a Zone-Based Firewall on Branchto allow Pings,

Did I set this up correctly? If not, please let me know how I can fix it.

Did I set this up correctly? If not, please let me know

how I can fix it. Configure a Zone-Based Firewall on Branchto allow

Configure a Zone-Based Firewall on Branchto allow Pings, HTTP, and SSH traffic if the traffic starts from the inside (i.e. the LAN) OGOO is the inside of the network o S0/0/0 is the outside of the network o ISP and Branch2 should not be able to originate traffic to Branch1 Beanshi (config)# zone security INSIDE Beanshi (config)# class-map type inspect match-any INSIDE, PROTOCOLS Branch(config-map) # match protocol ter Branch(config-map) # match protocol udr Branch] (config-map) # match protocol isip Branch(config)# zone security OUTSIDE Branch(config)# class-map type inspect match-any QUTSIDE_PROTOCOLS Branch(config-map) # match protocol imp Branch(config-map) # match protocol http Beanshi (config-map) # match protocol ssh Beanshi (config)# policy-map type inspect INSIDE TO INTERNET Beanshi (config-omar) # class type inspect INSIDE_PROTOCOLS Beanshi (config-pmar-c) # inspect Bransbl (config)# zone-pair security INSIDE TO OUTSIDE source INSIDE destination OUTSIDE Branshi (config)# zone-pair security INSIDE TO OUTSIDE Branshl (config-sec-zone-pair)# service-policy type inspect INSIDE TO OUTSIDE Beanshi (config)# interface gl/o Branshl (config-if)# zone-member security INSIDE Beansh(config-if)# exit Branch] (config)# interface sl/0/0 Bransh1(config-if)# zone-member security OUTSIDE Topology .10 PC-B 10.10.2.0/24 Giol.1 ISP DCE so/0/1 50/0/0 192.168.1.0/24 192.168.2.0/24 DCE 50/0/0 so/0/1 Branch1 10.10.1.0/24 Gi01 1 Branch2 Gi0/1 10.10.3.0/24 PC-C PC-A .10 .10 Configure a Zone-Based Firewall on Branchto allow Pings, HTTP, and SSH traffic if the traffic starts from the inside (i.e. the LAN) OGOO is the inside of the network o S0/0/0 is the outside of the network o ISP and Branch2 should not be able to originate traffic to Branch1 Beanshi (config)# zone security INSIDE Beanshi (config)# class-map type inspect match-any INSIDE, PROTOCOLS Branch(config-map) # match protocol ter Branch(config-map) # match protocol udr Branch] (config-map) # match protocol isip Branch(config)# zone security OUTSIDE Branch(config)# class-map type inspect match-any QUTSIDE_PROTOCOLS Branch(config-map) # match protocol imp Branch(config-map) # match protocol http Beanshi (config-map) # match protocol ssh Beanshi (config)# policy-map type inspect INSIDE TO INTERNET Beanshi (config-omar) # class type inspect INSIDE_PROTOCOLS Beanshi (config-pmar-c) # inspect Bransbl (config)# zone-pair security INSIDE TO OUTSIDE source INSIDE destination OUTSIDE Branshi (config)# zone-pair security INSIDE TO OUTSIDE Branshl (config-sec-zone-pair)# service-policy type inspect INSIDE TO OUTSIDE Beanshi (config)# interface gl/o Branshl (config-if)# zone-member security INSIDE Beansh(config-if)# exit Branch] (config)# interface sl/0/0 Bransh1(config-if)# zone-member security OUTSIDE Topology .10 PC-B 10.10.2.0/24 Giol.1 ISP DCE so/0/1 50/0/0 192.168.1.0/24 192.168.2.0/24 DCE 50/0/0 so/0/1 Branch1 10.10.1.0/24 Gi01 1 Branch2 Gi0/1 10.10.3.0/24 PC-C PC-A .10 .10

Step by Step Solution

There are 3 Steps involved in it

1 Expert Approved Answer
Step: 1 Unlock blur-text-image
Question Has Been Solved by an Expert!

Get step-by-step solutions from verified subject matter experts

Step: 2 Unlock
Step: 3 Unlock

Students Have Also Explored These Related Databases Questions!