Reference Guide

3 Configuration commands Security commands
NN47928-107 117
(acceptance or rejection) is determined by the
first policy that the packet matches. Therefore,
the sequential order of firewall policies is
important.
action allow|end Indicate whether a packet matching the policy
is accepted or rejected.
Example The following example configures a security policy that allows all TCP traffic
from the eth1 interface, destined for port 9000, and going out the eth0
interface.
> config security policy new from eth1 to eth0 proto tcp dport
9000 action allow
Example The following example makes all traffic originated by the BSGX4e itself (like
management traffic) destined to the WAN interface eth0 protected by the
QoS group 'management'.
> config security policy new from self to eth0 dip
192.168.1.10 qos management
Related
commands
del security policies
display security policies
show security policies
show security nat policies
show qos group