NGFW Command Line Interface Reference 147
Syntax
schedule (include|exclude) SCHEDULENAME
Example
NGFW{running-firewall-rule-myrule1}schedule include myhours1
NGFW{running-firewall-rule-myrule1}schedule exclude myhours1
NGFW{running-firewall-rule-myrule1}services
Apply IP Services.
Syntax
services (include|exclude) (service SERVICENAME)
services (include|exclude) (protocol PROTONUM)
services (include|exclude) (port tcp PORT [to PORT])
services (include|exclude) (port udp PORT [to PORT])
services (include|exclude) (icmp ICMP-CODENAMES|(TYPE [CODE]))
services (include|exclude) (icmpv6 ICMP6-CODENAMES|(TYPE [CODE]))
Example
NGFW{running-firewall-rule-myrule1}services include protocol 6
NGFW{running-firewall-rule-myrule1}services include port tcp 443
NGFW{running-firewall-rule-myrule1}services include service http
NGFW{running-firewall-rule-myrule1}services exclude icmpv6 any
NGFW{running-firewall-rule-myrule1}src-address
Apply source addresses.
Syntax
src-address include (any4|any6)
src-address include group ADDRESSGROUP
src-address include ipaddress (A.B.C.D|X:X::X:X)
src-address include ipaddress (A.B.C.D/M|X:X::X:X/M)
src-address include range ((A.B.C.D A.B.C.D)|(X:X::X:X X:X::X:X))
src-address exclude (any4|any6)
src-address exclude group ADDRESSGROUP
src-address exclude ipaddress (A.B.C.D|X:X::X:X)
src-address exclude ipaddress (A.B.C.D/M|X:X::X:X/M)
src-address exclude range ((A.B.C.D A.B.C.D)|(X:X::X:X X:X::X:X))
Example
NGFW{running-firewall-rule-myrule1}src-address exclude ipaddress 192.168.1.1
NGFW{running-firewall-rule-myrule1}src-address include ipaddress 192.168.1.0/24
NGFW{running-firewall-rule-myrule1}src-address include range 192.168.1.100
192.168.1.200
NGFW{running-firewall-rule-myrule1}src-address include group mygroup1
NGFW{running-firewall-rule-myrule1}src-zone
Apply source security zone.
Syntax
src-zone (include|exclude) ZONENAME
Example
NGFW{running-firewall-rule-myrule1}src-zone include myzone1
NGFW{running-firewall-rule-myrule1}src-zone exclude myzone1
Comentarios a estos manuales