Chapter 5. Cisco IOS Firewall

This chapter contains the following sections:

• Access Lists

• Dynamic Access Lists

• Time-Based Access Lists

• Reflexive Access Lists

• Cisco IOS Firewall Features

• How Context-Based Access Control (CBAC) Works

• Configuring Context-Based Access Control (CBAC)

• Summary

Cisco IOS Firewall is an add-on component of the Cisco IOS that provides functionality similar to that found on the Cisco PIX. Designed to allow the administrator to leverage existing hardware, Cisco IOS Firewall allows the administrator to effectively secure the network without the added cost of a separate firewall.

This chapter explores the features of Cisco IOS Firewall and discusses configuration choices associated with using this software. Before exploring Cisco IOS Firewall, this chapter will discuss advanced access lists to ensure that you have the solid foundation needed to work with Cisco IOS Firewall.