Chapter 19 Firewall

The following command displays the firewall rule(s) (including the default firewall rule) that applies to the packet direction from WAN to LAN. The firewall rule numbers in the menu are the firewall rules’ priority numbers in the global rule list.

Router# configure terminal Router(config)# show firewall WAN LAN firewall rule: 3

description:

user: any, schedule: none

from: WAN, to: LAN

source IP: any, source port: any

destination IP: Dest_1, service: MyService

log: no, action: allow, status: yes firewall rule: 4

description:

user: any, schedule: none

from: WAN, to: LAN

source IP: any, source port: any

destination IP: any, service: any

log: log, action: deny, status: yes

Router(config)# show firewall WAN LAN 2 firewall rule: 4

description:

user: any, schedule: none

from: WAN, to: LAN

source IP: any, source port: any

destination IP: any, service: any

log: no, action: deny, status: yes Router(config)#

19.3 Session Limit Commands

The following table identifies the values required for many of these commands. Other input values are discussed with the corresponding commands.

Table 59 Input Values for General Session Limit Commands

LABEL

DESCRIPTION

rule_number

The priority number of a session limit rule, 1 - 1000.

 

 

address_object

The name of the IP address (group) object. You may use 1-31 alphanumeric

 

characters, underscores(_), or dashes (-), but the first character cannot be a

 

number. This value is case-sensitive.

user_name

The name of a user (group). You may use 1-31 alphanumeric characters,

 

underscores(_), or dashes (-), but the first character cannot be a number.

 

This value is case-sensitive.

124

 

NXC CLI Reference Guide