NETGEAR ProSafe SRX5308 Cli Reference Manual page 262

ProSafe Gigabit Quad WAN SSL VPN Firewall SRX5308
In addition to the policy name, you can change the following for an IP network:
{{policy_address <ipaddress>} {policy_mask_length
start_port <port number>
end_port <port number>
policy_permission {Permit | Deny}
In addition to the policy name, you can change the following for all addresses (that is,
the destination_object_type keyword is set to All):
start_port <port number>
end_port <port number>
policy_permission {Permit | Deny}
Mode vpn-config [sslvpn-policy-settings]
Keyword
policy_name
policy_address
policy_mask_length
policy_address6
policy_ipv6_prefix_length
start_port
end_port
resource_name
policy_permission
Command example:
SRX5308> vpn sslvpn policy edit 2
vpn-config[sslvpn-policy-settings]> policy_name RoadWarriorPolicyIII
vpn-config[sslvpn-policy-settings]> start_port 35406
<subnet mask>} | {policy_address6 <ipv6-address>}
{policy_ipv6_prefix_length <prefix length>}}
Associated Keyword to
Select or Parameter to Type
policy name
ipaddress
subnet mask
ipv6-address
prefix length
port number
port number
resource name
Permit or Deny
VPN Mode Configuration Commands
262
Description
The policy name (alphanumeric string).
The IPv4 address, if the policy is for an IPv4
address or IPv4 network.
The subnet mask, if the policy is for an IPv4
network.
The IPv6 address, if the policy is for an IPv6
address or IPv6 network.
The prefix length, if the policy is for an IPv6
network.
The start port number for a policy port range.
(This does not apply if the policy is for a
network resource.)
The end port number for a policy port range.
(This does not apply if the policy is for a
network resource.)
The name of a resource that you configured
with the vpn sslvpn resource add
This keyword and parameter apply only if the
policy is for a network resource.
Specifies whether the policy permits or denies
access.
command.