NETGEAR ProSAFE SRX5308 - Page 261

VPN Mode Configuration Commands
261
ProSafe Gigabit Quad WAN SSL VPN Firewall SRX5308
vpn-config[sslvpn-policy-settings]> ip_version IPv4
vpn-config[sslvpn-policy-settings]>
policy_type Global
vpn-config[sslvpn-policy-settings]> destination_object_type NetworkResource
vpn-config[sslvpn-policy-settings]> resource_name RoadWarrior
vpn-config[sslvpn-policy-settings]> policy_permission Permit
vpn-config[sslvpn-policy-settings]> save
vpn-config[sslvpn-policy-settings]> policy_name GuestFTPPolicy
vpn-config[sslvpn-policy-settings]> ip_version IPv4
vpn-config[sslvpn-policy-settings]>
policy_type User
vpn-config[sslvpn-policy-settings]> policy_owner guest
vpn-config[sslvpn-policy-settings]> destination_object_type All
vpn-config[sslvpn-policy-settings]> start_port 25077
vpn-config[sslvpn-policy-settings]> end_port 25078
vpn-config[sslvpn-policy-settings]> service_type PortForwarding
vpn-config[sslvpn-policy-settings]> policy_permission Deny
vpn-config[sslvpn-policy-settings]> save
Related show command: show vpn sslvpn policy
vpn sslvpn policy edit <row id>
This command configures an existing SSL VPN policy. After you have issued the vpn
sslvpn policy edit command to specify the row to be edited (for row information, see
the output of the
show vpn sslvpn policy command), you enter the
vpn-config [sslvpn-policy-settings] mode. You can then configure one keyword and
associated parameter or associated keyword at a time in the order that you prefer. You
cannot change the policy type, policy owner, destination object, IP version, or service type.
Step 1 Format vpn sslvpn policy edit <row id>
Mode vpn
Step 2 Format policy_name <policy name>
In addition to the policy name, you can change the following for a network resource:
resource_name <resource name>
policy_permission {Permit | Deny}
In addition to the policy name, you can change the following for an IP address:
{{policy_address <ipaddress>} | {policy_address6
<ipv6-address>}}
start_port <port number>
end_port <port number>
policy_permission {Permit | Deny}