Firewall Default - Digitalchina Networks DCS-3950 series Manual

Command: firewall { enable | disable}
Functions: Enable or disable firewall
Parameters: enable means to enable of firewall; disable means to disable firewall.
Default: It is no use if default is firewall
Command mode: Global Mode
Usage Guide: Whether enabling or disabling firewall, access rules can be configured. But
only when the firewall is enabled, the rules can be used in specific orientations of specific
ports. When disabling the firewall, all ACL tied to ports will be deleted.
Example: Enable firewall
Switch(Config)#firewall enable

15.3.2.4 firewall default

Command: firewall default {permit | deny}
Functions: Configure default actions of firewall
Parameters: permit means to permit data packets to pass; deny means to deny data
packets to pass
Command mode: Global Mode
Default: Default action is permit.
Usage Guide: This command only influences IP packets from the port entrance, and all
packets can pass the switch in other situations.
Example: Configure firewall default action as permitting packets to pass.
Switch(Config)#firewall default permit
15.3.2.5 ip access extended
Command: ip access extended <name>
no ip access extended <name>
Function: Create and name a IP access list. If no is put in front of the command, the
access list will be removed together with all the entries in the list.
Parameters: <name> is the name of the access list. The <name> should be a string of
1~16 characters, and should not be a numeric string
Command mode: Global Mode.
Default: No extended access list is defined by default.
Usage Guide: When this command is called for the first time, an empty access list will be
created.
Example: Create an extended IP access list, and name it as tcpFlow.
Switch(Config)#ip access-list extended tcpFlow
15.3.2.6 ip access standard
Command: ip access standard <name>
no ip access standard <name>
Function: Create a name-based standard IP access list; the 'no ip access-list
DCS-3950 series Ethernet switch manual
266