Chapter 25 Secure Policy
ZyWALL / USG (ZLD) CLI Reference Guide
166
secure-policy6 zone_object {zone_object|ZyWALL} append Enters the IPv6 secure policy sub-command mode to
add a direction specific through-ZyWALL rule or to-
ZyWALL rule to the end of the global rule list. See
Table 86 on page 167 for the sub-commands.
secure-policy6 zone_object {zone_object|ZyWALL} delete
<1..5000>
Removes a direction specific IPv6 through-ZyWALL
rule or to-ZyWALL rule.
<1..5000>: the index number in a direction specific
firewall rule list.
secure-policy6 zone_object {zone_object|ZyWALL} flush Removes all direction specific IPv6 through-ZyWALL
rule or to-ZyWALL rules.
secure-policy6 zone_object {zone_object|ZyWALL} insert
rule_number
Enters the IPv6 secure policy sub-command mode to
add a direction specific through-ZyWALL rule or to-
ZyWALL rule before the specified rule number. See
Table 86 on page 167 for the sub-commands.
secure-policy6 zone_object {zone_object|ZyWALL} move
rule_number to rule_number
Moves a direction specific IPv6 through-ZyWALL rule
or to-ZyWALL rule to the number that you specified.
[no] secure-policy6 activate Enables the IPv6 secure policy on the ZyWALL / USG.
The
no command disables the IPv6 firewall.
secure-policy6 append Enters the IPv6 secure policy sub-command mode to
add a global firewall rule to the end of the global rule
list. See Table 86 on page 167 for the sub-commands.
secure-policy6 default-rule action {allow | deny |
reject} { no log | log [alert] }
Sets how the IPv6 secure policy handles packets that
do not match any other secure policy rule.
secure-policy6 delete rule_number Removes a IPv6 secure policy rule.
secure-policy6 flush Removes all IPv6 secure policy rules.
secure-policy6 insert rule_number Enters the IPv6 secure policy sub-command mode to
add a secure policy rule before the specified rule
number. See Table 86 on page 167 for the sub-
commands.
secure-policy6 move rule_number to rule_number Moves a IPv6 secure policy rule to the number that
you specified.
show secure-policy6 Displays all IPv6 secure policy settings.
show secure-policy6 rule_number Displays a IPv6 secure policy rule’s settings.
show secure-policy6 zone_object {zone_object|ZyWALL} Displays all IPv6 secure policy rules settings for the
specified packet direction.
show secure-policy6 zone_object {zone_object|ZyWALL}
rule_number
Displays a specified IPv6 secure policy rule’s settings
for the specified packet direction.
show secure-policy6 status Displays whether or not the IPv6 secure policy is
active, whether or not IPv6 asymmetrical route
topology is allowed, and the default IPv6 secure policy
rule’s configuration.
show secure-policy6 block_rules Displays all the IPv6 secure policy rules that deny
access.
show secure-policy6 any ZyWALL Shows all the IPv6 to-ZyWALL / USG secure policy
rules.
[no] secure-policy6 asymmetrical-route activate Allows or disallows asymmetrical route topology for
IPv6 traffic.
session-status-update reply-time <5..300> Set how many seconds the ZyWALL / USG will allow a
session to remain idle (without traffic) before closing
it.
Table 85 Command Summary: Secure Policy (continued)
COMMAND DESCRIPTION
To Next Page
Loading...
