ZyXEL Communications ZYWALL 1050 - V2.00 EDITION 1 Podręcznik Użytkownika Pobierz pdf (Strona 126)

Chapter 15 Firewall

ZyWALL (ZLD) CLI Reference Guide

126

Your customized rules take precedence and override the ZyWALL’s default settings. The

ZyWALL checks the schedule, user name (user’s login name on the ZyWALL), source IP

address, destination IP address and IP protocol type of network traffic against the firewall

rules (in the order you list them). When the traffic matches a rule, the ZyWALL takes the

action specified in the rule.

For example, if you want to allow a specific user from any computer to access one zone by

logging in to the ZyWALL, you can set up a rule based on the user name only. If you also

apply a schedule to the firewall rule, the user can only access the network at the scheduled

time. A user-aware firewall rule is activated whenever the user logs in to the ZyWALL and

will be disabled after the user logs out of the ZyWALL.

15.2 Firewall Commands

The following table identifies the values required for many of these commands. Other input

values are discussed with the corresponding commands.

The following table describes the commands available for the firewall. You must use the

configure terminal command to enter the configuration mode before you can use these

commands.

Table 62 Input Values for General Firewall Commands

LABEL DESCRIPTION

address_object The name of the IP address (group) object. You may use 1-31 alphanumeric

characters, underscores(

_), or dashes (-), but the first character cannot be a

number. This value is case-sensitive.

user_name The name of a user (group). You may use 1-31 alphanumeric characters,

underscores(_), or dashes (-), but the first character cannot be a number.

This value is case-sensitive.

zone_object The name of the zone. For the ZyWALL USG 300 and above, use up to 31

characters (a-zA-Z0-9_-). The name cannot start with a number. This value is

case-sensitive.

The ZyWALL USG 100 and 200 models use pre-defined zone names like

DMZ, LAN1, SSL VPN, WLAN, IPSec VPN, OPT, and WAN.

rule_number The priority number of a firewall rule. 1 - X where X is the highest number of

rules the ZyWALL model supports. See the ZyWALL’s User’s Guide for

details.

schedule_object The name of the schedule. You may use 1-31 alphanumeric characters,

underscores(

_), or dashes (-), but the first character cannot be a number.

This value is case-sensitive.

service_name The name of the service (group). You may use 1-31 alphanumeric characters,

underscores(

_), or dashes (-), but the first character cannot be a number.

This value is case-sensitive.

Table 63 Command Summary: Firewall

COMMAND DESCRIPTION

[no] connlimit max-per-host <1..8192> Sets he highest number of sessions that the

ZyWALL will permit a host to have at one time.

The

no command removes the settings.

firewall rule_number Enters the firewall sub-command mode to set

a firewall rule. See Table 64 on page 128 for

the sub-commands.

1 2 ... 121 122 123 124 125 126 127 128 129 130 131 ... 385 386

Komentarze do niniejszej Instrukcji

Brak uwag

ZyXEL Communications ZYWALL 1050 - V2.00 EDITION 1 Podręcznik Użytkownika Strona 126

Komentarze do niniejszej Instrukcji

Powiązane produkty i podręczniki dla Bramy / kontrolery ZyXEL Communications ZYWALL 1050 - V2.00 EDITION 1