
Chapter 3. Command Reference
46 X Family CLI Reference V 2.5.1
remove id
deletes a firewall rule.
update id
updates or creates a firewall with the specified ID. When a new rule is created, permit, block,
or web-filter must be specified.
authentication < disable | any | group name >
enables or disables authentication.
bandwidth < disable | < rule | session > guaranteed kbps max kbps pri pri >
restricts the bandwidth.
comment “description”
stores a comment for the rule.
counter-clear
clears counters for the rule.
dst-addr < all | group name | subnet ip netmask mask | range ip1 ip2 >
restricts destination addresses in the specified IP range.
logging < enable | disable >
enables or disables logging for the rule.
< permit | block | web-filter > src-zone dst-zone service
Required for a new rule. The variables
src
-
zone
and
dst
-
zone
can be this-device to
indicate the local device.
position position
the rule is placed in the specified position.
remote-logging < enable | disable >
enables or disables remote logging for the rule.
schedule < always | name >
schedules execution of the rule, either always or according to a named schedule.
src-addr < all | group name | subnet ip netmask mask | range ip1 ip2 >
restricts source addresses in the specified IP range.
timeout mins
specifies a timeout interval in minutes for the rule.
Using conf t firewall rule
create/update
firewall rule
Use configure terminal firewall rule update to create or update a firewall rule. In this example,
firewall rule 10 is created as a “permit” rule for LAN to WAN and for telnet service only:
Comentários a estes Manuais