Networking
Configuring the Zones
Cisco ISA500 Series Integrated Security Appliance Administrator Guide
127
4
The IPv6 network (subnet) is identified by the prefix, which consists of the
initial bits of the address. The default prefix length is 64 bits. All hosts in the
network have the identical initial bits for the IPv16 address. The number of
common initial bits in the addresses is set by the prefix length field.
STEP 7
Click
OK
to save your settings.
STEP 8
Click
Save
to apply your settings.
NOTE
Next steps:
•
After you configure the DMZ, connect the local server that you want to
public to Internet to the specified DMZ port, and then configure a port
forwarding rule or an advanced NAT rule to specify the public IP address of
the server (see
Configuring Port Forwarding Rules, page 195
Configuring Advanced NAT Rules, page 197
), and create a firewall access
rule to allow the inbound access to the server (see
•
If you want to reserve certain IP addresses for specified devices, go to the
Networking -> Static IP Reservations
page. See
. You must enable DCHP Server mode or DHCP
Relay mode for this purpose.
Configuring the Zones
A zone is a group of interfaces to which a security policy can be applied. The
interfaces in a zone share common functions or features. The interfaces are IP-
based interfaces (VLANs, WAN1, WAN2, and so forth). Each interface can only join
one zone, but each zone with specific security level can have multiple interfaces.
This section describes the security level definition for zones, the predefined
zones, and how to create new zones. It includes the following topics:
•
Security Levels for Zones, page 128
•
•
