ZyXEL Communications ZYWALL - CLI Reference Manual page 128

Chapter 15 Firewall
Your customized rules take precedence and override the ZyWALL's default settings. The
ZyWALL checks the schedule, user name (user's login name on the ZyWALL), source IP
address, destination IP address and IP protocol type of network traffic against the firewall
rules (in the order you list them). When the traffic matches a rule, the ZyWALL takes the
action specified in the rule.
For example, if you want to allow a specific user from any computer to access one zone by
logging in to the ZyWALL, you can set up a rule based on the user name only. If you also
apply a schedule to the firewall rule, the user can only access the network at the scheduled
time. A user-aware firewall rule is activated whenever the user logs in to the ZyWALL and
will be disabled after the user logs out of the ZyWALL.
15.2 Firewall Commands
The following table identifies the values required for many of these commands. Other input
values are discussed with the corresponding commands.
Table 63 Input Values for General Firewall Commands
LABEL
address_object
user_name
zone_object
rule_number
schedule_object
service_name
The following table describes the commands available for the firewall. You must use the
configure terminal
commands.
Table 64 Command Summary: Firewall
COMMAND
[no] connlimit max-per-host <1..8192>
firewall rule_number
128
DESCRIPTION
The name of the IP address (group) object. You may use 1-31 alphanumeric
characters, underscores( ), or dashes (-), but the first character cannot be a
_
number. This value is case-sensitive.
The name of a user (group). You may use 1-31 alphanumeric characters,
underscores( _ ), or dashes (-), but the first character cannot be a number.
This value is case-sensitive.
The name of the zone. For the ZyWALL USG 300 and above, use up to 31
characters (a-zA-Z0-9_-). The name cannot start with a number. This value is
case-sensitive.
The ZyWALL USG 100 and 200 models use pre-defined zone names like
DMZ, LAN1, SSL VPN, WLAN, IPSec VPN, OPT, and WAN.
The priority number of a firewall rule. 1 - X where X is the highest number of
rules the ZyWALL model supports. See the ZyWALL's User's Guide for
details.
The name of the schedule. You may use 1-31 alphanumeric characters,
underscores( _ ), or dashes (-), but the first character cannot be a number.
This value is case-sensitive.
The name of the service (group). You may use 1-31 alphanumeric characters,
underscores( _ ), or dashes (-), but the first character cannot be a number.
This value is case-sensitive.
command to enter the configuration mode before you can use these
DESCRIPTION
Sets he highest number of sessions that the
ZyWALL will permit a host to have at one time.
The no command removes the settings.
Enters the firewall sub-command mode to set
a firewall rule. See Table 65 on page 130
the sub-commands.
ZyWALL (ZLD) CLI Reference Guide
for