fw feature in ios routers

ohassairi · ‎04-29-2008

we use one cisco2811 router between two LANs as a firewall (while it contains fw feature)

(C2800NM-ADVSECURITYK9-M), Version 12.4(3g)

in classic firewalls (PIX) we can configure groups : set of computers, then in one rule we can make this group as source or destination.

but using fw feature in this router, i think it is impossible to do this. i must create one rule of each computer.

is there a way to use one group as a source or destination ?

any help?

thanks

Collin Clark · ‎04-29-2008

AFAIK you can not create groups like in the PIX/ASA, however if you look at the zoned-based firewall feature, you can do some grouping.

Hope that helps.