Table of Contents
Advertisement
Chapter 21 Firewall
The following command displays the firewall rule(s) (including the default firewall rule) that
applies to the packet direction from WAN to LAN. The firewall rule numbers in the menu are
the firewall rules' priority numbers in the global rule list.
Router# configure terminal
Router(config)# show firewall WAN LAN
firewall rule: 3
description:
user: any, schedule: none
from: WAN, to: LAN
source IP: any, source port: any
destination IP: Dest_1, service: MyService
log: no, action: allow, status: yes
firewall rule: 4
description:
user: any, schedule: none
from: WAN, to: LAN
source IP: any, source port: any
destination IP: any, service: any
log: log, action: deny, status: yes
Router(config)# show firewall WAN LAN 2
firewall rule: 4
description:
user: any, schedule: none
from: WAN, to: LAN
source IP: any, source port: any
destination IP: any, service: any
log: no, action: deny, status: yes
Router(config)#
21.3 Session Limit Commands
The following table identifies the values required for many of these commands. Other input
values are discussed with the corresponding commands.
Table 69 Input Values for General Session Limit Commands
LABEL
rule_number
address_object
user_name
140
DESCRIPTION
The priority number of a session limit rule, 1 - 1000.
The name of the IP address (group) object. You may use 1-31 alphanumeric
characters, underscores(
), or dashes (-), but the first character cannot be a
_
number. This value is case-sensitive.
The name of a user (group). You may use 1-31 alphanumeric characters,
underscores(
_
), or dashes (-), but the first character cannot be a number.
This value is case-sensitive.
NXC CLI Reference Guide
Advertisement
Table of Contents
