Digi IX10 User Manual page 442

Firewall
Packet filters are enabled by default. To disable, click to toggle off Enable.
4. (Optional) Type a Label that will be used to identify the rule.
5. For Action, select one of:
Accept: Allows matching network connections.
n
Reject: Blocks matching network connections, and sends an ICMP error if appropriate.
n
Drop: Blocks matching network connections, and does not send a reply.
n
6. Select the IP version.
7. Select the Protocol.
8. For Source zone, select the firewall zone that will be monitored by this rule for incoming
connections from network interfaces that are a member of this zone.
See Firewall configuration
9. For Destination zone, select the firewall zone. Packets destined for network interfaces that
are members of this zone will either be accepted, rejected or dropped by this rule.
See Firewall configuration
10. Click Apply to save the configuration and apply the change.

Command line
1. Log into the IX10 command line as a user with full Admin access rights.
Depending on your device configuration, you may be presented with an Access selection
menu. Type admin to access the Admin CLI.
2. At the command line, type config to enter configuration mode:
> config
(config)>
To edit the default packet filtering rule or another existing packet filtering rule:
a. Determine the index number of the appropriate packet filtering rule:
(config)> show firewall filter
0
action accept
dst_zone any
enable true
IX10 User Guide
for more information about firewall zones.
for more information about firewall zones.
Packet filtering
442