cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
3814
Views
0
Helpful
2
Replies

uc520 firewall

jure.koren
Level 1
Level 1

I have to configure uc520 to filter out a few ports between the two vlans I have and I don't know how. Is it possible to do it with CCA or is it better to do it through ssh? I don't even know what are my options.

2 Replies 2

Steven DiStefano
VIP Alumni
VIP Alumni

CCA 2.0(1) (latest Release) does support the identification of inside and outside interfaces (Faste 0/0) and FW.

But it sounds like you are trying to do something only on inside interfaces?  Can you describe what you are trying to do?

Please describe.

David Hornstein
Level 7
Level 7

Hi Jure.korem

CCA will create a firewall configuration and access-lists according to your CCA inputs, i cannot see an option to manually add a ACL.you it has to be modified manually.

But we must consider there are  Out of Band configuration  guidelines on where you can add a Access List entry;

please check out the out of band configuration guide book that can be downloaded from the following link   https://supportforums.cisco.com/docs/DOC-9809

Check out the section of the Out of Band configuration guide called "Security Parameters — Configuring Access Control Lists (ACLs)"

If you are unsure on how to modify or add a access list, you have the ability to work with the Planning Design and Implementation (PDH) team.

If you happen to be  a Cisco Select partner you have the ability to pose this question to the Planning Design and Implementation (PDH) team .

PDI help with planning your install, to help you be successful.  It's worth learning to work with the PDI team, there pretty good.

These folks are aware of the implications of not breaking the Out of Band Configuration guidelines . Breaking the Out of band guidelines could could result in CCA overwriting  any manual changes you make .

To get to the PDI try the following link; http://www.cisco.com/web/partners/tools/pdihd.htmland read the information on the PDI.

You may have to sign into Cisco using your CCO login to be able top open a case with PDI.  I think this is your safest approach to get help with your installation.

regards Dave