NETGEAR ProSAFE SRX5308 - Page 151

Security Mode Configuration Commands
151
ProSafe Gigabit Quad WAN SSL VPN Firewall SRX5308
Related show command: show security firewall ipv4 setup lan_dmz
security firewall ipv4 edit_rule lan_dmz inbound <row id>
This command configures an existing IPv4 LAN DMZ inbound firewall rule. After you have
issued the security firewall ipv4 edit_rule lan_dmz inbound command to
specify the row to be edited (for row information, see the output of the
show security firewall
ipv4 setup lan_dmz
command), you enter the security-config [firewall-ipv4-lan-dmz-outbound]
mode. You can then edit one keyword and associated parameter or associated keyword at a
time in the order that you prefer. However, note that the setting of the action keyword
determines which other keywords and parameters you can apply to a rule.
Step 1 Format security firewall ipv4 edit_rule lan_dmz inbound <row id>
Mode security
Step 2 Format service_name {default_services <default service name> |
{custom_services <custom service name>}
action {ALWAYS_BLOCK | ALWAYS_ALLOW |
BLOCK_BY_SCHEDULE_ELSE_ALLOW {schedule {Schedule1 |
Schedule2 | Schedule3}} | ALLOW_BY_SCHEDULE_ELSE_BLOCK
{schedule {Schedule1 | Schedule2 | Schedule3}}}
lan_users {address_wise {ANY | SINGLE_ADDRESS {lan_user_start_ip
<ipaddress>} | ADDRESS_RANGE {lan_user_start_ip <ipaddress>}
{lan_user_end_ip <ipaddress>}} | group_wise <group name>}
dmz_users {ANY | SINGLE_ADDRESS {dmz_user_start_ip <ipaddress>}
| ADDRESS_RANGE {dmz_user_start_ip <ipaddress>}
{dmz_user_end_ip <ipaddress>}}
log {NEVER | ALWAYS}
Mode security-config [firewall-
ipv4-lan-dmz-inbound]