Firewall Default; Firewall Enable - HPE FlexNetwork HSR6800 Security Command Reference

<Sysname> display firewall-statistics all

firewall default

Use firewall default to specify the default firewall filtering action of the IPv4 firewall.
Syntax
Standalone mode:
firewall default { deny | permit } { all | slot slot-number }
IRF mode:
firewall default { deny | permit } { all | chassis chassis-number slot slot-number }
Default
The default filtering action of the IPv4 firewall is permitting packets to pass (permit).
Views
System view
Default command level
2: System level
Parameters
deny: Specifies the filtering action as denying packets to pass the firewall.
permit: Specifies the filtering action as permitting packets to pass the firewall.
all: Specifies all interface cards.
slot slot-number: Specifies the interface card in the specified slot. (In standalone mode.)
chassis chassis-number slot slot-number: Specifies an interface card in an IRF member device.
The chassis-number argument represents the IRF member ID of the device. The slot-number
argument represents the slot number of the card. (In IRF mode.)
Examples
# Specify the default filtering action of the IPv4 firewall as denying packets to pass.
<Sysname> system-view
[Sysname] firewall default deny

firewall enable

Use firewall enable to enable the IPv4 firewall function.
Use undo firewall enable to disable the IPv4 firewall function.
Syntax
Standalone mode:
firewall enable { all | slot slot-number }
undo firewall enable
IRF mode:
firewall enable { all | chassis chassis-number slot slot-number }
undo firewall enable
364