Chapter 19 Firewall

19.2.2 Firewall Command Examples

The following example shows you how to add a firewall rule to allow a MyService connection from the WLAN zone to the IP addresses Dest_1 in the LAN zone.

Enter configuration command mode.

Create an IP address object.

Create a service object.

Enter the firewall sub-command mode to add a firewall rule.

Set the direction of travel of packets to which the rule applies.

Set the destination IP address(es).

Set the service to which this rule applies.

Set the action the NXC is to take on packets which match this rule.

Router# configure terminal

Router(config)# service-object MyService tcp eq 1234

Router(config)# address-object Dest_1 10.0.0.10-10.0.0.15

Router(config)# firewall insert 3

Router(firewall)# from WLAN

Router(firewall)# to LAN

Router(firewall)# destinationip Dest_1

Router(firewall)# service MyService

Router(firewall)# action allow

 

123

NXC CLI Reference Guide