Security Mode Configuration Commands
155
ProSafe Gigabit Quad WAN SSL VPN Firewall SRX5308
Related show command: show security firewall ipv4 setup lan_wan, show security firewall ipv4 setup
dmz_wan, and show security firewall ipv4 setup lan_dmz
IPv6 Firewall Commands
security firewall ipv6 default_outbound_policy {Allow | Block}
This command allows or blocks the IPv6 firewall default outbound policy.
Related show command: show security firewall ipv6 setup
security firewall ipv6 configure
This command configures a new IPv6 firewall rule. After you have issued the security
firewall ipv6 configure command, you enter the security-config [firewall-ipv6] mode,
and then you can configure one keyword and associated parameter or associated keyword at
a time in the order that you prefer. However, note that the setting of the action keyword
determines which other keywords and parameters you can apply to a rule.
Format security firewall ipv6 default_outbound_policy {Allow | Block}
Mode security
Step 1 Format security firewall ipv6 configure
Mode security
Step 2 Format from_zone {LAN | WAN | DMZ}
to_zone {LAN | WAN | DMZ}
service_name {default_services <default service name> |
custom_services <custom service name>}
action {ALWAYS_BLOCK | ALWAYS_ALLOW |
BLOCK_BY_SCHEDULE_ELSE_ALLOW {schedule {Schedule1 |
Schedule2 | Schedule3}} | ALLOW_BY_SCHEDULE_ELSE_BLOCK
{schedule {Schedule1 | Schedule2 | Schedule3}}}
source_address_type {ANY | SINGLE_ADDRESS {source_start_address
<ipv6-address>} | ADDRESS_RANGE {source_start_address
<ipv6-address>} {source_end_address <ipv6-address>}}
destination_address_type {ANY | SINGLE_ADDRESS
{destination_start_address <ipv6-address>} | ADDRESS_RANGE
{destination_start_address <ipv6-address>}
{destin
ation_end_address <ipv6-address>}}