Cisco CBAC Configuration Example

Hi Rene and staff,

just for fun i do this lab using “realistic” client and “realistic” server and IOSv for router
image

I do also NAT to be realistic

IOSv(config)#ip nat inside source static 192.168.0.1 80.0.0.1

All works fine, except when router initiates the ping
When i set

IOSv(config)#ip inspect name TEST icmp router-traffic

(in my lab, i use TEST instead of FIREWALL)
and to be specific, IOSv do not add a rule in the run config, but IOSv replace the rule ip inspect name TEST icmp with the rule ip inspect name TEST icmp router-traffic
and…it does not work
image

But the linux guest in the LAN can ping the server
image

Could it be an image issue ?

Regards