Chapter 14 Firewall
ZyWALL (ZLD) CLI Reference Guide
115
• Set the destination IP address(es).
• Set the service to which this rule applies.
• Set the action the ZyWALL is to take on packets which match this rule.
The following command displays the firewall rule(s) (including the default firewall rule) that
applies to the packet direction from WAN to LAN. The firewall rule numbers in the menu are
the firewall rules’ priority numbers in the global rule list.
Router# configure terminal
Router(config)# service-object MyService tcp eq 1234
Router(config)# address-object Dest_1 10.0.0.10-10.0.0.15
Router(config)# firewall insert 3
Router(firewall)# from WAN
Router(firewall)# to LAN
Router(firewall)# destinationip Dest_1
Router(firewall)# service MyService
Router(firewall)# action allow
Router# configure terminal
Router(config)# show firewall WAN LAN
firewall rule: 3
description:
user: any, schedule: none
from: WAN, to: LAN
source IP: any, source port: any
destination IP: Dest_1, service: MyService
log: no, action: allow, status: yes
firewall rule: 4
description:
user: any, schedule: none
from: WAN, to: LAN
source IP: any, source port: any
destination IP: any, service: any
log: log, action: deny, status: yes
Router(config)# show firewall WAN LAN 2
firewall rule: 4
description:
user: any, schedule: none
from: WAN, to: LAN
source IP: any, source port: any
destination IP: any, service: any
log: no, action: deny, status: yes
Router(config)#