Allow ip protocol in firewall for specific user

Nahid
Nahid  Diamond  (1)
7 years 10 months ago  View: 1339  Reply: 5
1F

1. make an acl

acl number 3005
 description user_defined_protocol
 rule 1 permit 50
 rule 2 permit udp destination 117.58.246.134 0
 rule 3 permit 115 destination 117.58.246.134 0

2. Call this acl in firewall interzone


FW01>sy
06:36:01  2014/05/19
Enter system view, return user view with Ctrl+Z.
HRP_M[SVFW01]firewall interzone ingress_trust egress_untrust
06:36:10  2014/05/19
HRP_M[SVFW01-interzone-ingress_trust-egress_untrust]detect user-defined 3005 inbound

HRP_M[SVFW01-interzone-ingress_trust-egress_untrust]detect user-defined 3005 outbound
HRP_M[SVFW01-interzone-ingress_trust-egress_untrust]



nazmun021
nazmun021  Gold 
7 years 10 months ago
2F
It is very useful
akther
akther  Gold 
7 years 10 months ago
3F
Useful post
jfjina
jfjina  Gold 
7 years 10 months ago
4F
good
nasir007
nasir007  Gold 
7 years 10 months ago
5F
good note
user_2837311
user_2837311  Diamond 
3 years 9 months ago
6F
useful document, thanks