Samsung Ubigate iBG2016 Configuration Manual page 352

CHAPTER 5. IPSEC
13.
Configure firewall policies for a group of mobile users to allow access to
the local LAN.
Router/configure# firewall corp
Router/configure/firewall corp# policy 1000 in address
20.1.1.100 20.1.1.150 10.0.1.0 24
Router/configure/firewall corp/policy 1000 in# exit
14.
Display firewall policies in the corp map.
Router# show firewall policy corp
Advanced: S-Self Traffic, F-Ftp-Filter, H-Http-Filter,
Pri
Action Advanced
1000
PERMIT E
1022
PERMIT SE
1023
PERMIT SE
1024
PERMIT E
302
The address range in this command typically matches the address
range configured in the dynamic IKE policy(see Step 4).
R-Rpc-Filter, N-Nat-Ip/Nat-Pool, L-Logging,
E-Policy Enabled, M-Smtp-Filter
Dir Source Addr
in 20.1.1.100
20.1.1.150
out any
in any
out any
Destination Addr
10.0.1.0/24 any
any any
any any
any any
Sport Dport Proto
any any
any any
any any
any any
© SAMSUNG Electronics Co., Ltd.