User's Manual
Table Of Contents
- ProSafe Wireless-N 8-Port Gigabit VPN Firewall FVS318N
- Contents
- 1. Introduction
- 2. Overview of the Configuration Commands
- 3. Net Mode Configuration Commands
- 4. Security Mode Configuration Commands
- Security Services Commands
- Security Schedules Commands
- IPv4 Add Firewall Rule and Edit Firewall Rule Commands
- IPv4 General Firewall Commands
- IPv6 Firewall Commands
- Attack Check Commands
- Session Limit, Time-Out, and Advanced Commands
- Address Filter and IP/MAC Binding Commands
- Port Triggering Commands
- UPnP Command
- Bandwidth Profile Commands
- Content Filtering Commands
- 5. System Mode Configuration Commands
- 6. Dot11 Mode Configuration Commands
- 7. VPN Mode Configuration Commands
- IPSec VPN Wizard Command
- IPSec IKE Policy Commands
- IPSec VPN Policy Commands
- IPSec VPN Mode Config Commands
- SSL VPN Portal Layout Commands
- SSL VPN Authentication Domain Commands
- SSL VPN Authentication Group Commands
- SSL VPN User Commands
- SSL VPN Port Forwarding Commands
- SSL VPN Client Commands
- SSL VPN Resource Commands
- SSL VPN Policy Commands
- RADIUS Server Command
- L2TP Server Commands
- 8. Overview of the Show Commands
- 9. Show Commands
- 10. Utility Commands
- CLI Command Index
Security Mode Configuration Commands
94
ProSafe Wireless-N 8-Port Gigabit VPN Firewall FVS318N
Command example:
FVS318N>
security firewall ipv4 add_rule dmz_wan outbound
security-config[firewall-ipv4-dmz-wan-outbound]>
service_name default_services FTP
security-config[firewall-ipv4-dmz-wan-outbound]>
action ALLOW_BY_SCHEDULE_ELSE_BLOCK
security-config[firewall-ipv4-dmz-wan-outbound]>
schedule Schedule2
security-config[firewall-ipv4-dmz-wan-outbound]>
dmz_users ANY
security-config[firewall-ipv4-dmz-wan-outbound]>
wan_users ANY
security-config[firewall-ipv4-dmz-wan-outbound]>
qos_profile Maximize-Reliability
security-config[firewall-ipv4-dmz-wan-outbound]>
log Never
security-config[firewall-ipv4-dmz-wan-outbound]>
save
Related show command: show security firewall ipv4 setup dmz_wan
wan_user_start_ip ipaddress There are two options:
• The IP address if the wan_users
keyword is set to
SINGLE_ADDRESS.
• The start IP address if the
wan_users keyword is set to
ADDRESS_RANGE.
wan_user_end_ip ipaddress The end IP address if the
wan_users keyword is set to
ADDRESS_RANGE.
QoS profile, logging, and NAT IP address
qos_priority Normal-Service, Minimize-Cost,
Maximize-Reliability,
Maximize-Throughput, or
Minimize-Delay
The type of QoS that applies to the
rule.
log NEVER or ALWAYS Enables or disables logging.
nat_ip type WAN_INTERFACE_ADDRESS or
SINGLE_ADDRESS
Specifies the type of NAT IP
address:
• WAN_INTERFACE_ADDRESS.
The IP address of the WAN
(broadband) interface.
• SINGLE_ADDRESS. Another IP
address, which you need to
configure using the nat_ip
address keywords.
nat_ip address ipaddress The NAT IP address, if the nat_ip
type keywords are set to
SINGLE_ADDRESS.
Keyword (might consist of two
separate words)
Associated Keyword to Select or
Parameter to Type
Description