Brocade Communications Systems 5600 vRouter Configuration Manual page 32

TABLE 12 Creating the zone policies
Step
Create a zone named private and attach interfaces to it.
Create a zone named dmz and attach an interface to it.
Create a zone named public and attach an interface to it.
Create rule sets named to_private , to_dmz , and to_public .
Attach the rule sets to each zone.
Commit the changes.
NOTE
Before committing changes to a zone, firewall requires that you should have an interface and a rule set attached to the zone.
The following example shows how to view the configuration.
vyatta@R1# show security zone-policy
zone dmz {
description DMZ
interface dp0p1p3
to private {
32
Command
vyatta@R1# set security zone-policy zone private
description PRIVATE
vyatta@R1# set security zone-policy zone private
interface dp0p1p1
vyatta@R1# set security zone-policy zone private
interface dp0p1p2
vyatta@R1# set security zone-policy zone dmz
description DMZ
vyatta@R1# set security zone-policy zone dmz
interface dp0p1p3
vyatta@R1# set security zone-policy zone public
description PUBLIC
vyatta@R1# set security zone-policy zone public
interface dp0p1p4
vyatta@R1# set security firewall name to_private
rule 1 action accept
vyatta@R1# set security firewall name to_dmz rule
1 action accept
vyatta@R1# set security firewall name to_public
rule 1 action accept
vyatta@R1# set security zone-policy zone private
to dmz firewall to_dmz
vyatta@R1# set security zone-policy zone private
to public firewall to_public
vyatta@R1# set security zone-policy zone dmz to
private firewall to_private
vyatta@R1# set security zone-policy zone dmz to
public firewall to_public
vyatta@R1# set security zone-policy zone public to
dmz firewall to_dmz
vyatta@R1# set security zone-policy zone public to
private firewall to_private
vyatta@R1# commit
Brocade 5600 vRouter Firewall Configuration Guide
Configuration Examples
53-1004253-01