firewall policy {in|out}
Except on the first page, right running head:
Heading1 or Heading1NewPage text (automatic)
605
Alcatel-Lucent
Beta
Beta
OmniAccess 700 CLI Command Reference Guide
FIREWALL
POLICY
{
IN
|
OUT
}
firewall policy
{
in
|
out
}
<policy-name>
D
ESCRIPTION
This command is used to attach a firewall policy to an interface in ‘in’ or ‘out’
direction. Firewall policy is applied to the ingress (incoming) traffic if “
in
” keyword
is used. Firewall policy is applied to the egress (outgoing) traffic if “
out
” keyword is
used.
Note:
Firewall policy will not take effect until it is bound to an interface.
P
ARAMETERS
D
EFAULT
V
ALUE
No default parameters.
E
XAMPLE
ALU(config)# interface GigabitEthernet7/0
ALU(config-if GigabitEthernet7/0)# firewall policy in P1
ICMP
-
BLOCK
-
TRACE
-
ROUTE
icmp-block-trace-route
D
ESCRIPTION
This command is not a default attack setting. The square brackets around the
whole command denotes that its optional. This implies that it is not set for
protection by default on the OA-700, but you can turn it on by explicitly adding the
above command in the user-defined attack prevention list.
P
ARAMETERS
None.
E
XAMPLE
ALU(config-firewall-attack-A1)# icmp-block-trace-route
Parameter
Description
in
Firewall policy is attached to the ingress traffic.
out
Firewall policy is attached to the egress traffic.
policy-name
Name of the firewall policy.
