NETGEAR ProSAFE SRX5308 - Page 124

Security Mode Configuration Commands
124
ProSafe Gigabit Quad WAN SSL VPN Firewall SRX5308
Command example:
SRX5308> security firewall ipv4 add_rule lan_wan inbound
security-config[firewall-ipv4-lan-wan-inbound]> service_name default_services FTP
security-config[firewall-ipv4-lan-wan-inbound]> action ALWAYS_ALLOW
security-config[firewall-ipv4-lan-wan-inbound]> send_to_lan_server SINGLE_ADDRESS
security-config[firewall-ipv4-lan-wan-inbound]> send_to_lan_server_start_ip 192.168.5.71
security-config[firewall-ipv4-lan-wan-inbound]> wan_destination_ip_address_start 10.168.50.1
security-config[firewall-ipv4-lan-wan-inbound]> wan_user ANY
security-config[firewall-ipv4-lan-wan-inbound]> qos_profile Standard
security-config[firewall-ipv4-lan-wan-inbound]> log NEVER
security-config[firewall-ipv4-lan-wan-inbound]> save
Related show command: show security firewall ipv4 setup lan_wan
security firewall ipv4 edit_rule lan_wan inbound <row id>
This command configures an existing IPv4 LAN WAN inbound firewall rule. After you have
issued the security firewall ipv4 edit_rule lan_wan inbound command to
specify the row to be edited (for row information, see the output of the
show security firewall
ipv4 setup lan_wan
command), you enter the security-config [firewall-ipv4-lan-wan-outbound]
mode. You can then edit one keyword and associated parameter or associated keyword at a
time in the order that you prefer. However, note that the setting of the action keyword
determines which other keywords and parameters you can apply to a rule.
log NEVER or ALWAYS Specifies whether logging is
disabled or enabled.
bandwidth_profile profile name The name of the bandwidth profile
that you have specified with the
security bandwidth profile add
command.
Step 1 Format security firewall ipv4 edit_rule lan_wan inbound <row id>
Mode security
Step 2 Format service_name {default_services <default service name> |
{custom_services <custom service name>}
action {ALWAYS_BLOCK | ALWAYS_ALLOW |
BLOCK_BY_SCHEDULE_ELSE_ALLOW {schedule {Schedule1 |
Schedule2 | Schedule3}} | ALLOW_BY_SCHEDULE_ELSE_BLOCK
{schedule {Schedule1 | Schedule2 | Schedule3}}}
Keyword (might consist of two
separate words)
Associated Keyword to Select or
Parameter to Type
Description