ZyXEL Communications UAG Series - 13.2 Zone Commands Summary

Chapter 13 Zones
UAG CLI Reference Guide
111
13.2 Zone Commands Summary
The following table describes the values required for many zone commands. Other values are
discussed with the corresponding commands.s
This table lists the zone commands.
Table 57 Input Values for Zone Commands
LABEL DESCRIPTION
profile_name The name of a zone, or the name of a VPN tunnel.
Use up to 31 characters (a-zA-Z0-9_-). The name cannot start with a number. This value
is case-sensitive.
About the pre-defined zones in the UAG:
• The lan1 interface always belongs to the LAN1 zone.
• The lan2 interface always belongs to the LAN2 zone.
• The dmz interface always belongs to the DMZ zone.
• The wan1, wan2, wan1_ppp, or wan2_ppp interfaces always belong to the WAN zone.
Table 58 zone Commands
COMMAND DESCRIPTION
show zone [profile_name] Displays information about the specified zone or about all zones.
show zone binding-iface Displays each interface and zone mappings.
show zone default-binding Displays the pre-configured interface and zone mappings that come with the
UAG.
show zone none-binding Displays the interfaces, tunnels and SSL VPNs that are not associated with a
zone yet.
show zone system-default Displays the pre-configured default zones that you cannot delete from the
UAG.
show zone user-define Displays all customized zones.
[no] zone profile_name Creates the zone if necessary and enters sub-command mode. The no
command deletes the zone.
zone profile_name Enter the sub-command mode.
[no] block Blocks intra-zone traffic. The
no command allows intra-zone traffic.
[no] interface
interface_name
Adds the specified interface to the specified zone. The no command removes
the specified interface from the specified zone. See Section 8.2 on page 70 for
information about interface names.
[no] crypto
profile_name
Adds the specified IPSec VPN tunnel to the specified zone. The no command
removes the specified IPSec VPN tunnel from the specified zone.
[no] sslvpn
profile_name
Adds the specified SSL VPN tunnel to the specified zone. The no command
removes the specified SSL VPN tunnel from the specified zone.