Siemens RUGGEDCOM ROX II User Manual page 240

Chapter 6
Security
Section 6.9.10.2
Adding an Interface
To configure an interface for a firewall, do the following:
1. Display the list of available interfaces by typing:
show running-config ip
2. Record the name of the chosen interface.
3. Enter Configuration mode by typing:
config
4. Add the interface by typing:
security firewall fwconfig firewall fwinterface name
Where:
• firewall is the name of the firewall
• name is the name of the interface
5. Configure the interface settings by typing the following commands:
Parameter
iptype { iptype }
description { description }
Parameter
arp_filter
routeback
tcpflags
dhcp
norfc1918
routefilter
proxyarp
maclist
nosmurfs
logmartians
6. Associate the interface with a pre-defined zone or mark the associated zone as undefined. For more
information about associating the interface with a zone, refer to
with a Zone".
194
Synopsis: { ipv4, ipv6, ipv4ipv6 }
Default: ipv4
Internet protocol type - use both when no addresses are used, otherwise define IPv4 and
IPv6 rules for each type of addresses used.
Synopsis: A string
(Optional) The description string for this interface
IPv4 ONLY- See additional info. Responds only to ARP requests for configured IP
addresses (This is permanently enabled system wide since ROX 2.3.0, and this option no
longer has any effect).
IPv4 and IPv6 - Interface traffic routed back out that same interface.
IPv4 and IPv6. Illegal combinations of TCP flags dropped and logged at info level.
IPv4 and IPv6 - Allows DHCP datagrams to enter and leave the interface.
Not currently implemented
IPv4 and IPv6 - Enables /rpfilter/ spoofing protection
IPv4 ONLY - Enables proxy ARP.
Not currently implemented
IPv4 ONLY - Packets with broadcast address as source dropped and logged at info level.
IPv4 ONLY - Logging of packets with impossible source addresses.
Description
Description
Section 6.9.10.3, "Associating an Interface
RUGGEDCOM ROX II
CLI User Guide
Adding an Interface