[nsp] RE: IOS Firewall Issues

[Wilson, Dan]

Ok, I'm assuming I will need to employ CBAC.  How would one employ this,
i.e. does anyone have a link to a sample config?  Rob Thomas maybe??

I have a couple of questions regarding IOS Firewall.

Am I correct in assuming it *does* stateful?

How would I view the state tables?

How would I determine what traffic is allowed inbound??

And

How, exactly, would I set rules on what would be allowed inbound?

I'm running 7140, 7206, 3640 and 2621's all running 12.2(8)T, which I 
Switched to in order to run encrypted traffic over GRE tunnels, so
That I could change routes if tunnel connections weren't working.

Any ideas would be appreciated.

Thanks.


Dan

  dan.wilson at transamerica.com