ZyXEL Communications P-660HW-D Series - Manual (Page 284)

P-660HW-D Series User’s Guide
283 Appendix G Firewall Commands
Config edit firewall set #> tcp-idle-timeout This command sets how long ZyXEL device
lets an inactive TCP connection remain open
before considering it closed.
Config edit firewall set #> log This command sets whether or not the ZyXEL
device creates logs for packets that match the
firewall’s default rule set.
Rules Config edit firewall set #> rule permit
This command sets whether packets that
match this rule are dropped or allowed
through.
Config edit firewall set #> rule active no> This command sets whether a rule is enabled
or not.
Config edit firewall set #> rule protocol
This command sets the protocol specification
number made in this rule for ICMP.
Config edit firewall set #> rule log match | not-match | both> This command sets the ZyXEL device to log
traffic that matches the rule, doesn't match,
both or neither.
Config edit firewall set #> rule alert no> This command sets whether or not the ZyXEL
device sends an alert e-mail when a DOS
attack or a violation of a particular rule occurs.
config edit firewall set #> rule srcaddr-
single This command sets the rule to have the
ZyXEL device check for traffic with this
individual source address.
config edit firewall set #> rule srcaddr-
subnet mask> This command sets a rule to have the ZyXEL
device check for traffic from a particular
subnet (defined by IP address and subnet
mask).
config edit firewall set #> rule srcaddr-range
address> This command sets a rule to have the ZyXEL
device check for traffic from this range of
addresses.
Table 116 Firewall Commands (continued)
FUNCTION COMMAND DESCRIPTION