ZyXEL Communications ZYWALL USG CLI - Firewall Command Examples

Chapter 14 Firewall
ZyWALL (ZLD) CLI Reference Guide
114
14.2.1 Firewall Command Examples
The following example shows you how to add a firewall rule to allow a MyService connection
from the WAN zone to the IP addresses Dest_1 in the LAN zone.
• Enter configuration command mode.
• Create an IP address object.
• Create a service object.
• Enter the firewall sub-command mode to add a firewall rule.
• Set the direction of travel of packets to which the rule applies.
firewall zone_object {zone_object|ZyWALL} delete
<1..5000>
Removes a direction specific through-
ZyWALL rule or to-ZyWALL rule.
<1..5000>: the index number in a direction
specific firewall rule list.
firewall zone_object {zone_object|ZyWALL} flush Removes all direction specific through-
ZyWALL rule or to-ZyWALL rules.
firewall zone_object {zone_object|ZyWALL} insert
rule_number
Enters the firewall sub-command mode to add
a direction specific through-ZyWALL rule or
to-ZyWALL rule before the specified rule
number.
firewall zone_object {zone_object|ZyWALL} move
rule_number to rule_number
Moves a direction specific through-ZyWALL
rule or to-ZyWALL rule to the number that you
specified.
[no] firewall activate Enables the firewall on the ZyWALL. The
no
command disables the firewall.
firewall append Enters the firewall sub-command mode to add
a global firewall rule to the end of the global
rule list.
firewall default-rule action {allow | deny |
reject} { no log | log [alert] }
Sets how the firewall handles packets that do
not match any other firewall rule.
firewall delete rule_number Removes a firewall rule.
firewall flush Removes all firewall rules.
firewall insert rule_number Enters the firewall sub-command mode to add
a firewall rule before the specified rule
number.
firewall move rule_number to rule_number Moves a firewall rule to the number that you
specified.
show connlimit max-per-host Displays the highest number of sessions that
the ZyWALL will permit a host to have at one
time.
show firewall Displays all firewall settings.
show firewall rule_number Displays a firewall rule’s settings.
show firewall zone_object {zone_object|ZyWALL} Displays all firewall rules settings for the
specified packet direction.
show firewall zone_object {zone_object|ZyWALL}
rule_number
Displays a specified firewall rule’s settings for
the specified packet direction.
show firewall status Displays whether the firewall is active or not.
Table 59 Command Summary: Firewall (continued)
COMMAND DESCRIPTION