How i import cisco rule to Fwbuilder

Open Discussion
Mambo
2011-11-27
2013-03-05

  • Mambo
    Mambo
    2011-11-27

    i install fwbuilder v5 on linux ubunto 11 , im trying to import cisco acl  by copy the "sh run" to a text file . but when i used import firewall rull , he show me that he didnt support this files , what im doing wrongs .
    i hope you can help me .
    thanks

     

  • Vadim Kurland
    Vadim Kurland
    2011-11-27

    could you post first 10 lines of the file you tried to import ?

     

  • Mambo
    Mambo
    2011-11-30

    hi
    shure i can .Thanks
    cisco 1800

    interface FastEthernet0/0
    ip address 192.168.143.1 255.255.255.0
    no ip redirects
    no ip unreachables
    no ip proxy-arp
    ip flow ingress
    ip route-cache flow
    duplex auto
    speed auto
    no cdp enable
    no mop enabled
    !
    interface FastEthernet0/1
    description Wan_Bezeq_82-8367246
    ip address 10.204.194.58 255.255.255.252
    ip access-group 101 out
    no ip redirects
    no ip unreachables
    no ip proxy-arp
    speed 100
    full-duplex
    no cdp enable
    no mop enabled
    !
    ip forward-protocol nd
    ip route 0.0.0.0 0.0.0.0 10.204.194.57
    !
    ip flow-export source FastEthernet0/0
    ip flow-export version 9
    ip flow-export destination 172.16.1.16 2055
    ip flow-export destination 172.16.1.17 2051
    !
    no ip http server
    no ip http secure-server
    !
    access-list 101 permit ip any host 10.40.4.21
    access-list 101 permit ip any host 10.40.4.40
    access-list 101 permit tcp host 192.168.143.1 eq 161 host 172.16.1.17
    access-list 101 permit tcp host 192.168.143.1 eq 161 host 172.16.1.16
    access-list 101 permit ip host 192.168.143.200 host 172.16.1.16
    access-list 101 permit icmp host 192.168.143.1 host 172.16.1.17
    access-list 101 permit icmp host 192.168.143.1 host 172.16.1.16
    access-list 101 permit icmp host 192.168.143.1 host 172.16.1.224
    access-list 101 permit udp host 192.168.143.1 eq 2051 host 172.16.1.17
    access-list 101 permit tcp any host 172.16.1.31 eq www
    access-list 101 permit tcp any host 172.16.1.31 eq 4001
    access-list 101 permit tcp any host 172.16.1.221 eq 3389
    access-list 101 permit tcp any host 172.16.1.222 eq 3389
    access-list 101 permit tcp any host 172.16.1.224 eq 3389
    access-list 101 permit tcp any host 10.70.1.247 eq telnet
    access-list 101 permit tcp any eq 9100 host 172.16.0.168
    access-list 101 deny   ip any any log

     

  • Vadim Kurland
    Vadim Kurland
    2011-11-30

    fwbuilder needs to know IOS version and looks for the line "Version NN.MM" or "IOS Version NN.MM" at the top of the configuration file

     

  • Mambo
    Mambo
    2011-12-01

    Thank you very much .