Cisco process when mixing firewall, ACL, QoS, VPN IPSec etc.

qiangwucisco_au · ‎02-09-2010

Recently, I have a question when I prepare a case which implement firewall (such as CBAC or ZBF), normal ACL, QoS, IPS and IPSec in a single router, for example, on a particular interface for ingress traffic, how will router process the traffic according to above setting. That is, what kinds of process order the router will follow? If you have some information, it is very appreciated.

Jon Marshall · ‎02-09-2010

qiangwucisco_au wrote:

Recently, I have a question when I prepare a case which implement firewall (such as CBAC or ZBF), normal ACL, QoS, IPS and IPSec in a single router, for example, on a particular interface for ingress traffic, how will router process the traffic according to above setting. That is, what kinds of process order the router will follow? If you have some information, it is very appreciated.

Have a look at this doc which lists the order of operation of processes on an IOS router -

http://www.cisco.com/en/US/tech/tk648/tk361/technologies_tech_note09186a0080133ddd.shtml#topic1

Jon

qiangwucisco_au · ‎03-09-2010

Thanks, Jon. It sounds helpful. I will read it carefully.

Cheers