ZyXEL Communications ZyWALL Series - 29.2.1 Secure Policy Sub-Commands

Chapter 29 Secure Policy
ZyWALL Series CLI Reference Guide
226
29.2.1 Secure Policy Sub-Commands
The following table describes the sub-commands for several secure-policy and secure-policy6
commands.
secure-policy6 default-rule
action {allow | deny | reject} {
no log | log [alert] }
Sets how the IPv6 secure policy handles packets that do not
match any other secure policy rule.
secure-policy6 delete rule_number
Removes a IPv6 secure policy rule.
secure-policy6 flush
Removes all IPv6 secure policy rules.
secure-policy6 insert rule_number
Enters the IPv6 secure policy sub-command mode to add a secure
policy rule before the specified rule number. See Table 114 on
page 226 for the sub-commands.
secure-policy6 move rule_number
to rule_number
Moves a IPv6 secure policy rule to the number that you specified.
show secure-policy6
Displays all IPv6 secure policy settings.
show secure-policy6 rule_number
Displays a IPv6 secure policy rule’s settings.
show secure-policy6 zone_object
{zone_object|ZyWALL}
Displays all IPv6 secure policy rules settings for the specified packet
direction.
show secure-policy6 zone_object
{zone_object|ZyWALL} rule_number
Displays a specified IPv6 secure policy rule’s settings for the
specified packet direction.
show secure-policy6 status
Displays whether or not the IPv6 secure policy is active, whether or
not IPv6 asymmetrical route topology is allowed, and the default
IPv6 secure policy rule’s configuration.
show secure-policy6 block_rules
Displays all the IPv6 secure policy rules that deny access.
show secure-policy6 any ZyWALL
Shows all the IPv6 to-Zyxel Device secure policy rules.
[no] secure-policy6 asymmetrical-
route activate
Allows or disallows asymmetrical route topology for IPv6 traffic.
session-status-update reply-time
<5..300>
Set how many seconds the Zyxel Device will allow a session to
remain idle (without traffic) before closing it.
session-status-update alg
{active|inactive}
Enables or Disables ALG session updates
show session-status-update reply-
time
Displays idle session timeout
Table 113 Command Summary: Secure Policy (continued)
COMMAND DESCRIPTION
Table 114 firewall Sub-commands
COMMAND DESCRIPTION
action {allow|deny|reject}
Sets the action the Zyxel Device takes when packets match this
rule.
[no] activate
Enables a secure policy rule. The no command disables the rule.