NETGEAR ProSafe FVS318N Cli Reference Manual page 106

ProSafe Wireless-N 8-Port Gigabit VPN Firewall FVS318N
Keyword (might consist of two
separate words)
lan_users group_wise
dmz_users
dmz_user_start_ip
dmz_user_end_ip
Logging
log
Command example:
FVS318N> security firewall ipv4 add_rule lan_dmz outbound
security-config[firewall-ipv4-lan-dmz-outbound]> service_name default_services FTP
security-config[firewall-ipv4-lan-dmz-outbound]> action ALWAYS_ALLOW
security-config[firewall-ipv4-lan-dmz-outbound]> lan_users group_wise GROUP3
security-config[firewall-ipv4-lan-dmz-outbound]> dmz_users ADDRESS_RANGE
security-config[firewall-ipv4-lan-dmz-outbound]> dmz_user_start_ip 176.16.2.65
security-config[firewall-ipv4-lan-dmz-outbound]> dmz_user_end_ip 176.16.2.85
security-config[firewall-ipv4-lan-dmz-outbound]> log Never
security-config[firewall-ipv4-lan-dmz-outbound]> save
Related show command:
security firewall ipv4 edit_rule lan_dmz outbound <row id>
This command configures an existing IPv4 LAN DMZ outbound firewall rule. After you have
issued the security firewall ipv4 edit_rule lan_dmz outbound command to
specify the row to be edited (for row information, see the output of the
command), you enter the security-config [firewall-ipv4-lan-dmz-outbound]
ipv4 setup lan_dmz
mode. You can then edit one keyword and associated parameter or associated keyword at a
Associated Keyword to Select or
Parameter to Type
group name
ANY, SINGLE_ADDRESS, or
ADDRESS_RANGE
ipaddress
ipaddress
NEVER or ALWAYS
show security firewall ipv4 setup lan_dmz
Security Mode Configuration Commands
106
Description
The name of the LAN group. The
group name is either a default
name (Group1, Group2, Group3,
and so on) or a custom name that
you specified with the net lan
lan_groups edit <row id> <new
group name> command.
The type of DMZ address.
There are two options:
• The IP address if the dmz_users
keyword is set to
SINGLE_ADDRESS.
• The start IP address if the
dan_users keyword is set to
ADDRESS_RANGE.
The end IP address if the
dan_users keyword is set to
ADDRESS_RANGE.
Enables or disables logging.
show security firewall