Cisco Systems 7600 SERIES manual Cisco IOS Firewall Feature Set Support Overview, 23-5

Chapter 23 Configuring Network Security

Configuring the Cisco IOS Firewall Feature Set

•Firewall Configuration Guidelines and Restrictions, page 23-6

•Configuring CBAC on Cisco 7600 Series Routers, page 23-6

Cisco IOS Firewall Feature Set Support Overview

The firewall feature set images support these Cisco IOS firewall features:

•Context-based Access Control (CBAC)

•Port-to-Application Mapping (PAM)

•Authentication Proxy

These are the firewall feature set image names:

•c6sup22-jo3sv-mz

•c6sup22-po3sv-mz

•c6sup12-jo3sv-mz

•c6sup12-po3sv-mz

For more information about Cisco IOS firewall features, refer to the Cisco IOS Security Configuration Guide, Release 12.1, “Traffic Filtering and Firewalls” online publications:

•The “Cisco IOS Firewall Overview” chapter at this URL:

http://www.cisco.com/univercd/cc/td/doc/product/software/ios121/121cgcr/secur_c/scprt3/scdfirw l.htm

•The “Configuring Context-Based Access Control” chapter at this URL:

http://www.cisco.com/univercd/cc/td/doc/product/software/ios121/121cgcr/secur_c/scprt3/scdcbac

.htm

•The “Configuring Authentication Proxy” chapter at this URL:

http://www.cisco.com/univercd/cc/td/doc/product/software/ios121/121cgcr/secur_c/scprt3/scdauth p.htm

•Cisco IOS Security Command Reference publication at this URL: http://www.cisco.com/univercd/cc/td/doc/product/software/ios121/121cgcr/secur_r/index.htm

The following features are supported with and without the use of a Cisco IOS firewall image:

•Standard access lists and static extended access lists

•Lock-and-key (dynamic access lists)

•IP session filtering (reflexive access lists)

•TCP intercept

•Security server support

•Network address translation

•Neighbor router authentication

•Event logging

•User authentication and authorization

Cisco 7600 Series Router Cisco IOS Software Configuration Guide—12.1E

78-14064-04 23-5