Firewall Packet filtering
IX20 User Guide
947
8. For Source zone, select the firewall zone that will be monitored by thisrule for incoming
connectionsfrom network interfaces that are a member of thiszone.
See Firewall configuration for more information about firewall zones.
9. For Destination zone, select the firewall zone. Packets destined for network interfaces that are
members of this zone will either be accepted, rejected or dropped by this rule.
See Firewall configuration for more information about firewall zones.
10. Click Apply to save the configuration and apply the change.
Command line
1. Select the device in Remote Manager and click Actions> Open Console, or log into the IX20
local command line as a user with full Admin access rights.
Depending on your device configuration, you may be presented with an Access selection
menu. Type admin to accessthe Admin CLI.
2. At the command line, type config to enter configuration mode:
> config
(config)>
To edit the default packet filtering rule or another existing packet filtering rule:
a. Determine the index number of the appropriate packet filtering rule:
(config)> show firewall filter
0
action accept
dst_zone any
enable true
ip_version any
label Allow all outgoing traffic
protocol any
src_zone internal
1
action drop
dst_zone internal
enable true
ip_version any
label myfilter
protocol any
src_zone external
(config)>
b. Select the appropriate rule by using its index number:
(config)> firewall filter 1
(config firewall filter 1)>
To create a new packet filtering rule:
(config)> add firewall filter end
(config firewall filter 1)>
To Next Page
Loading...
Need help?
General