Zone Security

Zone-Based Firewall (ZBF) security zones define logical groupings for interfaces. Each interface is assigned to a zone, and traffic policies are applied between zone-pairs. This feature manages the zone security definitions.

Diagram

Classes

configuration (iosxe.devices)

Name	Type	Constraint	Mandatory	Default Value
zone_security	Class	[zone_security]	No

zone_security (iosxe.devices.configuration)

Name	Type	Constraint	Mandatory	Default Value
zones	List	[zones]	No

zones (iosxe.devices.configuration.zone_security)

Name	Type	Constraint	Mandatory	Default Value
name	String		Yes
description	String		No
protection	String		No
vpns	List	[vpns]	No

vpns (iosxe.devices.configuration.zone_security.zones)

Name	Type	Constraint	Mandatory	Default Value
id	Integer	min: 0	Yes

Example

iosxe:
  devices:
    - name: ROUTER-1
      configuration:
        zone_security:
          zones:
            - name: INSIDE
              description: Internal trusted network
            - name: OUTSIDE
              description: External untrusted network
            - name: DMZ
              description: Demilitarized zone for public services
        interfaces:
          ethernets:
            - type: GigabitEthernet
              id: 2
              zone_member_security: INSIDE
            - type: GigabitEthernet
              id: 3
              zone_member_security: OUTSIDE