ZyXEL Communications ZyWALL Series - Page 429

Chapter 47 IP Exception
ZyWALL Series CLI Reference Guide
429
Table 237 Commands for IP Exception
COMMAND DESCRIPTION
security-service ip-
exception {profile_name}
Configure an IPv4 rule.
If the
rule does not currently exist, then the Zyxel Device creates it.
source {address_name |
any} destination
{address_name | any}
{log | no-log}
address_name: Apply this rule to IPv4 packets with the specified source or
destination address.
any: Apply this
rule to IPv4 packets with any source or destination address.
log: Create a log message each time an incoming IPv4 packet matches
this
rule.
no-log: Do not create any log messages.
[no] {anti-virus| ip-
reputation | ips | threat-
website} bypass
Sets the service that IPv4 packets will bypass. To bypass multiple services, run
the command multiple times.
ips is IDP.
Use the no command to stop bypassing a service.
[no]
description
{DESCRIPTION}
{DESCRIPTION}: Sets a description for the IP Exception rule. You can use up
to 60 printable ASCII characters.
Use the no command to delete the description for this profile.
security-service ip6-
exception {profile_name}
Configure an IPv6 rule.
If the
rule does not currently exist, then the Zyxel Device creates it.
source {address_name |
any} destination
{address_name | any}
{log | no-log}
address_name: Apply this rule to IPv6 packets with the specified source or
destination address.
any: Apply this
rule to IPv6 packets with any source or destination address.
log: Create a log a log message each time an incoming IPv6 packet
matches this
rule.
no-log: Do not create any log messages.
[no] {anti-virus | ip-
reputation | ips | threat-
website} bypass
Sets a service that IPv6 packets will bypass. You can run this command
multiple times to bypass multiple services.
ips is IDP.
Use the no command to stop bypassing a service.
[no]
description
{DESCRIPTION}
{DESCRIPTION}: Sets a description for the IP Exception rule. You can use up
to 60 printable ASCII characters.
Use the no command to delete the description for this profile.
no security-service ip-
exception profile_name
Removes the specified IPv4 rule.
no security-service ip6-
exception profile_name
Removes the specified IPv6 rule.
show security-service ip-
exception
Displays all IPv4 rules.
show security-service
ip6-exception
Displays all IPv6 rules.