NETGEAR ProSafe SRX5308 Cli Reference Manual page 158

ProSafe Gigabit Quad WAN SSL VPN Firewall SRX5308
Command example:
SRX5308> security firewall ipv6 configure
security-config[firewall-ipv6]> from_zone WAN
security-config[firewall-ipv6]> to_zone LAN
security-config[firewall-ipv6]> service_name default_services RTELNET
security-config[firewall-ipv6]> action ALWAYS_ALLOW
security-config[firewall-ipv6]> source_address_type SINGLE_ADDRESS
security-config[firewall-ipv6]> source_start_address 2002::B32:AAB1:fD41
security-config[firewall-ipv6]> destination_address_type SINGLE_ADDRESS
security-config[firewall-ipv6]> destination_start_address FEC0::db8:145
security-config[firewall-ipv6]> log ALWAYS
security-config[firewall-ipv6]> save
Related show command:
security firewall ipv6 edit <row id>
This command configures an existing IPv6 firewall rule. After you have issued the security
firewall ipv6 edit command to specify the row to be edited (for row information, see
the output of the
show security firewall ipv6 setup
[firewall-ipv6] mode.You can then edit one keyword and associated parameter or associated
keyword at a time in the order that you prefer. However, note that the setting of the action
keyword determines which other keywords and parameters you can apply to a rule.
Step 1 Format
security firewall ipv6 edit <row id>
Mode security
Step 2 Format
from_zone {LAN | WAN | DMZ}
to_zone {LAN | WAN | DMZ}
service_name {default_services <default service name> |
action {ALWAYS_BLOCK | ALWAYS_ALLOW |
source_address_type {ANY | SINGLE_ADDRESS {source_start_address
<ipv6-address>} {source_end_address <ipv6-address>}}
destination_address_type {ANY | SINGLE_ADDRESS
show security firewall ipv6 setup
custom_services <custom service name>}
BLOCK_BY_SCHEDULE_ELSE_ALLOW {schedule {Schedule1 |
Schedule2 | Schedule3}} | ALLOW_BY_SCHEDULE_ELSE_BLOCK
{schedule {Schedule1 | Schedule2 | Schedule3}}}
<ipv6-address>} | ADDRESS_RANGE {source_start_address
{destination_start_address <ipv6-address>} | ADDRESS_RANGE
{destination_start_address <ipv6-address>}
{destination_end_address <ipv6-address>}}
Security Mode Configuration Commands
158
command), you enter the security-config