Samsung Ubigate iBG3026 Configuration Manual page 332

CHAPTER 25. IPSEC
Logging is disable
Source Address is any, Dest Address is any
Source Port is any, Dest Port is any, any
Schedule is disabled, Ftp-Filter is disabled
Smtp-Filter is disabled, Http-Filter is disabled
Rpc-Filter is disabled, Nat is disabled
Bytes In 0, Bytes Out 0
14.
Configure firewall policies for a group of mobile users to allow access to
the local LAN.
Router/configure/firewall corp#
Router/configure/firewall corp# policy 1000 in user-group
sales address any any 10.0.1.0 24
Router/configure/firewall corp/policy 1000 in# exit
Router/configure/firewall corp#
15.
Display firewall policies in the corp ma.
Router# show firewall policy corp
Advanced: S-Self Traffic, F-Ftp-Filter, H-Http-Filter,
R-Rpc-Filter, N-Nat-Ip/Nat-Pool, L-Logging,
E-Policy Enabled, M-Smtp-Filter
Pri Dir Source Addr
Proto Action Advanced
1000 in any
1022 out any
1023 in any
1024 out any
292
Be sure to match the user group name in the policy command with the
name used in Step 4(the dynamic IKE policy).
10.0.1.0/24
any any any any PERMIT SE
any any any any PERMIT SE
any any any any PERMIT E
Destination Addr
any any any PERMIT E
© SAMSUNG Electronics Co., Ltd.
Sport Dport