Session Limit Commands - ZyXEL Communications UAG Series Cli Reference Manual

The following example shows you how to add an IPv4 firewall rule to allow a MyService connection
from the WAN zone to the IP addresses Dest_1 in the LAN zone.
• Enter configuration command mode.
• Create an IP address object.
• Create a service object.
• Enter the firewall sub-command mode to add a firewall rule.
• Set the direction of travel of packets to which the rule applies.
• Set the destination IP address(es).
• Set the service to which this rule applies.
• Set the action the UAG is to take on packets which match this rule.
Router# configure terminal
Router(config)# service-object MyService tcp eq 1234
Router(config)# address-object Dest_1 10.0.0.10-10.0.0.15
Router(config)# firewall insert 3
Router(firewall)# from WAN
Router(firewall)# to LAN
Router(firewall)# destinationip Dest_1
Router(firewall)# service MyService
Router(firewall)# action allow
The following command displays the default IPv4 firewall rule that applies to the WAN to UAG
packet direction. The firewall rule number is in the rule's priority number in the global rule list.
Router(config)# show firewall WAN Device
firewall rule: 13
description:
user: any, schedule: none
from: WAN, to: Device
source IP: any, source port: any
destination IP: any, service: Default_Allow_WAN_To_Device
log: no, action: allow, status: yes
connection match: no

18.3 Session Limit Commands

The following table identifies the values required for many of these commands. Other input values
are discussed with the corresponding commands.
Table 65 Input Values for General Session Limit Commands
LABEL
rule_number
address_object
user_name
UAG CLI Reference Guide
DESCRIPTION
The priority number of a session limit rule, 1 - 1000.
The name of the IP address (group) object. You may use 1-31 alphanumeric
characters, underscores ( ), or dashes (-), but the first character cannot be a
_
number. This value is case-sensitive.
The name of a user (group). You may use 1-31 alphanumeric characters, underscores
( ), or dashes (-), but the first character cannot be a number. This value is case-
_
sensitive.
Chapter 18 Firewall
125