DMVPN on ZBF Router

Unanswered Question
Feb 8th, 2010
User Badges:

I am new to ZBF, but because of some limitations in the classic IOS Firewall have been forced to attempt to implement it. I understand the basics of ZBF but am wondering of the implications to my DMVPN Tunnel Interfaces. Unless there is a functional reason for it, Is there any reason why my Tunnel Interface can't be in my private zone?

Secondly, how do I make sure the appropriate protocols are allowed through the ZBF? Currently I just use an extended access-list to allow the needed ports and protocols. Do I continue that or ??


  • 1
  • 2
  • 3
  • 4
  • 5
Overall Rating: 0 (0 ratings)


This Discussion