Siemens RUGGEDCOM ROX II User Manual page 237

RUGGEDCOM ROX II
CLI User Guide
Zone
DMZ
Fw
Vpn1
Vpn2
New zones may be defined as needed. For example, if each Ethernet interface is part of the local network zone,
disabling traffic from the Internet zone to the local network zone would disable traffic to all Ethernet interfaces.
If access to the Internet is required for some Ethernet interfaces, but not others, a new zone may be required for
those interfaces.
CONTENTS
• Section 6.9.9.1, "Viewing a List of Zones"
• Section 6.9.9.2, "Adding a Zone"
• Section 6.9.9.3, "Deleting a Zone"
Section 6.9.9.1
Viewing a List of Zones
To view a list of zones, type:
show running-config security firewall fwconfig firewall fwzone
Where:
• firewall is the name of the firewall
If zones have been configured, a table or list similar to the following example appears:
ruggedcom# show running-config security firewall fwconfig fwzone
security
firewall
fwconfig firewall
fwzone fw
type firewall
description FirewallZone
!
fwzone man
description IPv4Zone
!
!
!
!
If no zones have been configured, add zones as needed. For more information, refer to
Zone".
Section 6.9.9.2
Adding a Zone
To add a new zone for a firewall, do the following:
Viewing a List of Zones
Description
Demilitarized zone
The firewall itself
IPsec connections on w1ppp
IPsec connections on w2ppp
Chapter 6
Security
Section 6.9.9.2, "Adding a
191