Table of Contents
Advertisement
parameter
user-group
nat-ip
port-map
log
example:
To add a transit policy to permit FTP from the map corp, enter:
SR/configure> firewall corp SR/configure/firewall corp> policy 1 out service ftp permit SR/
configure/firewall corp/policy 1 out>
To add a transit policy to permit TCP traffic from 10.1.1.1 with prefix-len 24 to any IP address,
enter:
SR/configure> firewall corp SR/configure/firewall corp> policy 2 out protocol tcp address
10.1.1.1 24 any any permit SR/configure/firewall corp/policy 2 out>
To add a transit policy to deny TCP traffic with address defined in address object sobj and dobj,
enter:
SR/configure> firewall corp SR/configure/firewall corp> policy 3 out protocol tcp address sobj
dobj deny SR/configure/firewall corp/policy 3 out>
To add a transit policy to permit TCP traffic from 120.1.1.1 to any with source port number
100 to 200 and destination port number from 300 to 400, enter:
SR/configure/firewall corp> policy 4 out protocol tcp address 120.1.1.1 32 any any port 100
200 300 400 permit SR/configure/firewall corp/policy 4 out>
To delete a transit policy with priority 3, enter:
SR/configure/firewall corp> no policy 3 out
To add a self policy to permit TCP traffic from 100.1.1.1 with a prefix-len of 24 from internet
map, enter:
SR/configure> firewall internet SR/configure/firewall internet> policy 10 out protocol tcp
address 10.1.1.1 24 any any permit self SR/configure/firewall internet/policy 10 out>
To enter an existing policy sub-tree, enter
SR/configure> firewall corp SR/configure/firewall corp> policy 4 out SR/configure/firewall corp/
policy 4 out>
To modify the source and destination address configuration of an existing firewall policy, enter
SR/configure/firewall corp> policy 4 out address 21.1.1.1 21.1.1.5 any any permit SR/
configure/firewall corp/policy 4 out>
Avaya Secure Router 3120 Command Reference Guide
self
-- self traffic
The user group name.
The IP address for PAT.
Port to Application Mapping - for reverse NAT only.
Enables or disables logging. Default is enable.
definition
firewall policy
December 2010
969
Advertisement
Table of Contents
