NGFW Command Line Interface Reference 185
ip-filter (allow|deny) ip (A.B.C.D/M|X:X::X:X/M|A.B.C.D|X:X::X:X)
Valid entries:
allow Allow IPv4/IPv6 rule
deny Deny IPv4/IPv6 rule
default Default rule
Possible values for service are:
https allow/deny HTTPS. This will affect SMS which uses HTTPS
ssh allow/deny SSH
icmp allow/deny ICMP/ICMPv6
snmp allow/deny SNMP
ip IP address
A.B.C.D/M IPv4 address with netmask
X:X::X:X/M IPv6 address with prefix length
A.B.C.D IPv4 address
X:X::X:X IPv6 address
Example
NGFW{running-mgmt}ip-filter allow default
NGFW{running-mgmt}ip-filter allow https ip 192.168.1.0/24
NGFW{running-mgmt}ip-filter deny ip 192.168.1.1
NGFW{running-mgmt}ip-filter deny https ip 2001:2:0:0:0:0:0:1
NGFW{running-mgmt}ipaddress
Configure IP address.
Syntax
ipaddress (A.B.C.D/M|X:X::X:X/M)
Example
NGFW{running-mgmt}ipaddress 192.168.1.1/24
NGFW{running-mgmt}ipaddress 100:0:0:0:0:0:0:1/64
NGFW{running-mgmt}physical-media
Configure physical-media settings.
Syntax
physical-media (auto-neg)|(10half|10full|100half|100full|1000full)
Valid entries:
auto-neg Enable auto-negotiation (default is on)
SPEED-MODE Set the port speed
Possible values for SPEED-MODE are:
10half Supported port speed and mode
10full Supported port speed and mode
100half Supported port speed and mode
100full Supported port speed and mode
1000full Supported port speed and mode
Example
NGFW{running-mgmt}physical-media auto-neg
NGFW{running-mgmt}physical-media 1000full
Comentarios a estos manuales