On Wed, Feb 22, 2012 at 9:12 PM, Oliver Garraux <[email protected]> wrote: > On Wed, Feb 22, 2012 at 8:28 AM, Chris Mason <[email protected]> wrote: >>> when you do zone based firewalling on an ISR router..... traffic from one >>> inside interface to another inside interface should not be affected by the >>> firewall correct? >> >> That is my understanding as long as the traffic is intra-zone and not >> inter-zone (i.e. between interfaces within the same zone). > > I think you can create intra-zone policies in some of the newer > versions of IOS. I'm not sure what specific version that feature was > added in though. > > Oliver
Jeremy Stretch blogged about this recently. Depending on IOS version, you may or may not need to explicitly allow intra-zone traffic. See http://packetlife.net/blog/2012/jan/30/ios-zone-based-firewall/ _______________________________________________ cisco-nsp mailing list [email protected] https://puck.nether.net/mailman/listinfo/cisco-nsp archive at http://puck.nether.net/pipermail/cisco-nsp/
