ADTRAN 1000R Series ip firewall check reflexive-traffic

Command Reference Guide Global Configuration Mode Command Set

ip firewall check reflexive-traffic

Use the ip firewall check reflexive-traffic command to enable the AOS stateful inspection firewall to

process traffic from a primary subnet to a secondary subnet on the same interface through the firewall. Use

the no form of this command to disable this feature.

Syntax Description

No subcommands.

Default Values

All AOS

security features are disabled by default until th e ip firewall command is issued at the Global

Configuration prompt. In addition, the reflexive traffic check is disabled until the ip firewall check

reflexive-traffic command is issued.

Applicable Platforms

This command applies to the NetVanta 300, 1000R, 2000, 3000, 4000, and 5000 and Total Access 900

Series units.

Command History

Release 8.1 Command was introduced.

Functional Notes

This command allows the firewall to process traffic from a primary subnet to a secondary subnet on the

same interface through the firewall. If enabled, this traffic will be processed through the access policy on

that interface and any actions specified will be executed on the traffic.

Usage Examples

The following example enables the AOS reflexive traffic check:

(config)#ip firewall check reflexive-traffic

The AOS security featur es must be enabled (using the ip firewall command) for the stateful

inspection firewall to be activated.