User's Manual

Networking
Configuring the Zones
Cisco ISA500 Series Integrated Security Appliance Administrator Guide 127
4
The IPv6 network (subnet) is identified by the prefix, which consists of the
initial bits of the address. The default prefix length is 64 bits. All hosts in the
network have the identical initial bits for the IPv16 address. The number of
common initial bits in the addresses is set by the prefix length field.
STEP 7 Click OK to save your settings.
STEP 8 Click Save to apply your settings.
NOTE Next steps:
• After you configure the DMZ, connect the local server that you want to
public to Internet to the specified DMZ port, and then configure a port
forwarding rule or an advanced NAT rule to specify the public IP address of
the server (see Configuring Port Forwarding Rules, page 195 or
Configuring Advanced NAT Rules, page 197), and create a firewall access
rule to allow the inbound access to the server (see Configuring a Firewall
Access Rule, page 183).
• If you want to reserve certain IP addresses for specified devices, go to the
Networking -> Static IP Reservations page. See Configuring DHCP
Reserved IPs, page 122. You must enable DCHP Server mode or DHCP
Relay mode for this purpose.
Configuring the Zones
A zone is a group of interfaces to which a security policy can be applied. The
interfaces in a zone share common functions or features. The interfaces are IP-
based interfaces (VLANs, WAN1, WAN2, and so forth). Each interface can only join
one zone, but each zone with specific security level can have multiple interfaces.
This section describes the security level definition for zones, the predefined
zones, and how to create new zones. It includes the following topics:
• Security Levels for Zones, page 128
• Predefined Zones, page 128
• Configuring the Zones, page 129